Unrated severityNVD Advisory· Published Dec 17, 2019· Updated Aug 4, 2024

CVE-2019-0384

Description

Transaction Management in SAP Treasury and Risk Management (corrected in S4CORE versions 1.01, 1.02, 1.03, 1.04 and EA-FINSERV versions 6.0, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0) does not perform necessary authorization checks for functionalities that require user identity.

Affected products

SAP/SAP Treasury and Risk Managementllm-create
SAP/EA-FINSERVllm-create
Range: 6.0, 6.03 to 6.06, 6.16 to 6.18, 8.0
SAP/S4COREllm-fuzzy
Range: 1.01 to 1.04
SAP SE/SAP Treasury and Risk Management (EA-FINSERV)v5
Range: < 6.0
SAP SE/SAP Treasury and Risk Management (S4CORE)v5
Range: < 1.01

Patches

Vulnerability mechanics

References

launchpad.support.sap.commitrex_refsource_MISC
wiki.scn.sap.com/wiki/pages/viewpage.actionmitrex_refsource_CONFIRM

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000