csirt@kutim:~/threat-intel/cve/CVE-2020-6204

Katalog CVE

CVSS 4.3 · Medium EPSS 0,63%

Kerentanan Missing Authorization pada sap treasury and risk management (ea-finserv), sap treasury and risk management (s4core). Skor CVSS 3.1 4.3 (Medium) menurut NVD.

Deskripsi (NVD)

The selection query in SAP Treasury and Risk Management (Transaction Management) (EA-FINSERV?versions 600, 603, 604, 605, 606, 616, 617, 618, 800 and S4CORE versions 101, 102, 103, 104) returns more records than it should be when selecting and displaying the contract number, leading to Missing Authorization Check.

Rincian

Terbit di NVD
10 Maret 2020
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
4.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-862: Missing Authorization
EPSS (30 hari)
0,63% peluang dieksploitasi; lebih tinggi dari 48,6% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
sap treasury and risk management (ea-finserv) Versi 600
sap treasury and risk management (ea-finserv) Versi 603
sap treasury and risk management (ea-finserv) Versi 604
sap treasury and risk management (ea-finserv) Versi 605
sap treasury and risk management (ea-finserv) Versi 606
sap treasury and risk management (ea-finserv) Versi 616
sap treasury and risk management (ea-finserv) Versi 617
sap treasury and risk management (ea-finserv) Versi 618
sap treasury and risk management (ea-finserv) Versi 800
sap treasury and risk management (s4core) Versi 101
sap treasury and risk management (s4core) Versi 102
sap treasury and risk management (s4core) Versi 103
sap treasury and risk management (s4core) Versi 104

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.