description: SAP Portfolio and Project Management, before versions S4CORE 102, 103, EPPM 100 and CPRXRPM 500_702, 600_740, 610_740; unintentionally allows a user to discover accounting information of the Projects in Project dashboard, leading to Information Disclosure.
problem types: Information Disclosure
affected:
{
product: SAP Portfolio and Project Management (S4CORE)
vendor: SAP SE
versions:
status: affected, version: 102
status: affected, version: 103
}
{
product: SAP Portfolio and Project Management (EPPM)
vendor: SAP SE
versions:
status: affected, version: 100
}
{
product: SAP Portfolio and Project Management (CPRXRPM)
vendor: SAP SE
versions:
status: affected, version: 500_702
status: affected, version: 600_740
status: affected, version: 610_740
}
