Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Missing Authorization check in SAP Group Reporting Data Collection (Enter Package Data)
Vulnerability Description
SAP Group Reporting Data Collection does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. On successful exploitation, specific data can be changed via the Enter Package Data app although the user does not have sufficient authorization causing high impact on Integrity of the appliction.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Vulnerability Type
授权机制缺失
Vulnerability Title
SAP Group Reporting Data Collection 安全漏洞
Vulnerability Description
SAP Group Reporting Data Collection是德国思爱普（SAP）公司的一个集团报告数据收集程序。 SAP Group Reporting Data Collection存在安全漏洞，该漏洞源于不会对经过身份验证的用户执行必要的授权检查，从而导致权限升级。
CVSS Information
N/A
Vulnerability Type
N/A