Vulnerabilities > CVE-2020-6298 - Missing Authorization vulnerability in SAP Generic Market Data 400/450/500
Attack vector
NETWORK Attack complexity
LOW Privileges required
SINGLE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
NONE Summary
SAP Banking Services (Generic Market Data), versions - 400, 450, 500, allows an unauthorized user to display protected Business Partner Generic Market Data (GMD) and change related GMD key figure values, due to Missing Authorization Check.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 3 |