description: SAP Master Data Governance, versions - 748, 749, 750, 751, 752, 800, 801, 802, 803, 804, allows users to display change request details without having required authorizations, due to Missing Authorization Check.
problem types: Missing Authorization Check
affected:
{
product: SAP Master Data Governance
vendor: SAP SE
versions:
status: affected, version: < 748
status: affected, version: < 749
status: affected, version: < 750
status: affected, version: < 751
status: affected, version: < 752
status: affected, version: < 800
status: affected, version: < 801
status: affected, version: < 802
status: affected, version: < 803
status: affected, version: < 804
}
metrics:
cvssV3_0: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 5.4
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
version: 3.0
]