description: Automated Note Search Tool (update provided in SAP Basis 7.0, 7.01, 7.02, 7.31, 7.4, 7.5, 7.51, 7.52, 7.53 and 7.54) does not perform sufficient authorization checks leading to the reading of sensitive information.
problem types: Missing Authorization Check
affected:
{
product: Automated Note Search Tool (SAP Basis)
vendor: SAP SE
versions:
status: affected, version: < 7.0
status: affected, version: < 7.01
status: affected, version: < 7.02
status: affected, version: < 7.31
status: affected, version: < 7.4
status: affected, version: < 7.5
status: affected, version: < 7.51
status: affected, version: < 7.52
status: affected, version: < 7.53
status: affected, version: < 7.54
}
metrics:
cvssV3_0: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
version: 3.0
]