description: Within SAP S/4HANA - versions S4CORE 101, 102, 103, 104, 105, 106, SAPSCORE 127, the application business partner extension for Spain/Slovakia does not perform necessary authorization checks for a low privileged authenticated user over the network, resulting in escalation of privileges leading to low impact on confidentiality and integrity of the data.
problem types: CWE-862
affected:
{
product: SAP S/4HANA
vendor: SAP SE
versions:
status: affected, version: S4CORE 101
status: affected, version: 102
status: affected, version: 103
status: affected, version: 104
status: affected, version: 105
status: affected, version: 106
status: affected, version: SAPSCORE 127
}