description: SAP NetWeaver AS ABAP (Banking Services), versions - 710, 711, 740, 750, 751, 752, 75A, 75B, 75C, 75D, 75E, does not perform necessary authorization checks for an authenticated user due to Missing Authorization Check, allowing wrong and unexpected change of individual conditions by a malicious user leading to wrong prices.
problem types: Missing Authorization Check
affected:
{
product: SAP NetWeaver AS ABAP (Banking Services)
vendor: SAP SE
versions:
status: affected, version: < 710
status: affected, version: < 711
status: affected, version: < 740
status: affected, version: < 750
status: affected, version: < 751
status: affected, version: < 752
status: affected, version: < 75A
status: affected, version: < 75B
status: affected, version: < 75C
status: affected, version: < 75D
status: affected, version: < 75E
}
metrics:
cvssV3_0: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
version: 3.0
]