Riskcovery

CVE-2020-6301

State
Published
Severity
5.4 Medium
Published
Aug 12, 2020
Updated
Aug 4, 2024
Reserved
Jan 8, 2020

Read the record on cve.org

Description

SAP ERP (HCM Travel Management), versions - 600, 602, 603, 604, 605, 606, 607, 608, allows an authenticated but unauthorized attacker to read, modify and settle trips, resulting in escalation of privileges, due to Missing Authorization Check.

Scores

CVSSScoreVectorSource
3.05.4 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:Nsap

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
SAP ERP (HCM Travel Management)SAP SE
  • < 600Affected
  • < 602Affected
  • < 603Affected
  • < 604Affected
  • < 605Affected
  • < 606Affected
  • < 607Affected
  • < 608Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.