CVE-2020-6214

Name of the Vulnerable Software and Affected Versions SAP S/4HANA (Financial Products Subledger) version 100

Description The issue arises from the use of an incorrect authorization object in some reports. Although other authorization objects protect the affected reports, exploitation could allow an authenticated attacker to view, change, or delete data. This would compromise the proper segregation of duties in the system.

Recommendations For SAP S/4HANA (Financial Products Subledger) version 100, update the authorization objects in the affected reports to ensure proper segregation of duties. At the moment, there is no information about a newer version that contains a fix for this vulnerability.