SAP S/4HANA (Bank Account Application) does not perform necessary authorization checks. This allows an authenticated 'approver' user to delete attachment from bank account application of other user, leading to a low impact on integrity, with no impact on the confidentiality of the data or the availability of the application.
References
Configurations
No configuration.
History
10 Jun 2025, 01:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-06-10 01:15
Updated : 2025-06-10 01:15
NVD link : CVE-2025-42991
Mitre link : CVE-2025-42991
JSON object : View
Products Affected
No product.
CWE
CWE-862
Missing Authorization