VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Jun 14, 2022· Updated Jun 17, 2026

CVE-2022-31589

CVE-2022-31589

Description

Due to improper authorization check, business users who are using Israeli File from SHAAM program (/ATL/VQ23 transaction), are granted more than needed authorization to perform certain transaction, which may lead to users getting access to data that would otherwise be restricted.

Affected products

20
  • SAP/ERP Financial Accounting2 versions
    cpe:2.3:a:sap:erp_financial_accounting:618:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:sap:erp_financial_accounting:618:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:erp_financial_accounting:720:*:*:*:*:*:*:*
  • SAP/ERP Localization For Cee Countries5 versions
    cpe:2.3:a:sap:erp_localization_for_cee_countries:c-cee_110_600:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:sap:erp_localization_for_cee_countries:c-cee_110_600:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:erp_localization_for_cee_countries:c-cee_110_602:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:erp_localization_for_cee_countries:c-cee_110_603:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:erp_localization_for_cee_countries:c-cee_110_604:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:erp_localization_for_cee_countries:c-cee_110_700:*:*:*:*:*:*:*
  • SAP/S\/4hana9 versions
    cpe:2.3:a:sap:s\/4hana:100:*:*:*:*:*:*:*+ 8 more
    • cpe:2.3:a:sap:s\/4hana:100:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:s\/4hana:101:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:s\/4hana:102:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:s\/4hana:103:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:s\/4hana:104:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:s\/4hana:105:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:s\/4hana:106:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:s\/4hana:107:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:s\/4hana:108:*:*:*:*:*:*:*
  • SAP/SHAAMllm-fuzzy
  • SAP SE/SAP ERP, localization for CEE countries.v5
    Range: C-CEE 110_600
  • SAP SE/SAP Financialsv5
    Range: SAP_FIN 618
  • SAP SE/SAP S/4Hana Corev5
    Range: S4CORE 100

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.