Missing Authorization Check in Egypt Localized Withholding Tax Reports in SAP ERP and S/4 HANA

Missing Authorization Check in Egypt Localized Withholding Tax Reports in SAP ERP and S/4 HANA

CVE-2020-6212 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Egypt localized withholding tax reports Clearing of Liabilities and Remittance Statement and Summary in SAP ERP (versions 618, 730, EAPPLGLO 607) and S/4 HANA (versions 100, 101, 102, 103, 104) do not perform necessary authorization checks for an authenticated user, allowing reading or modification of some tax reports, due to Missing Authorization Check.

Learn more about our User Device Pen Test.