Vulnerabilities > CVE-2020-6301 - Missing Authorization vulnerability in SAP HCM Travel Management
Attack vector
NETWORK Attack complexity
LOW Privileges required
SINGLE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
NONE Summary
SAP ERP (HCM Travel Management), versions - 600, 602, 603, 604, 605, 606, 607, 608, allows an authenticated but unauthorized attacker to read, modify and settle trips, resulting in escalation of privileges, due to Missing Authorization Check.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 8 |