VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Mar 10, 2020· Updated Jun 17, 2026

CVE-2020-6199

CVE-2020-6199

Description

The view FIMENAV_COMPCERT in SAP ERP (MENA Certificate Management), EAPPGLO version 607, SAP_FIN versions- 618, 730 and SAP S/4HANA (MENA Certificate Management), S4CORE versions- 100, 101, 102, 103, 104; does not have any authorization check to it due to which an attacker without an authorization group can maintain any company certificate, leading to Missing Authorization Check.

Affected products

7
  • SAP/ERP2 versions
    cpe:2.3:a:sap:erp:607:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:sap:erp:607:*:*:*:*:*:*:*
    • (no CPE)range: 607
  • SAP/SAP_FINllm-fuzzy
    Range: 618, 730
  • SAP/S/4HANAllm-fuzzy
    Range: 100, 101, 102, 103, 104
  • SAP SE/SAP ERP (EAPPGLO)v5
    Range: < 607
  • SAP SE/SAP ERP (SAP_FIN)v5
    Range: < 618
  • SAP SE/SAP S/4HANA (S4CORE)v5
    Range: < 100

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.