Vulnerabilities > CVE-2020-6301 - Missing Authorization vulnerability in SAP HCM Travel Management
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
NONE Summary
SAP ERP (HCM Travel Management), versions - 600, 602, 603, 604, 605, 606, 607, 608, allows an authenticated but unauthorized attacker to read, modify and settle trips, resulting in escalation of privileges, due to Missing Authorization Check.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 8 |