SAP Commerce - versions 2105.3, 2011.13, 2005.18, 1905.34, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. Authenticated attackers will be able to access and edit data from b2b units they do not belong to.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: sap
Published: 2021-11-10T15:24:42
Updated: 2024-08-04T02:44:10.860Z
Reserved: 2021-09-03T00:00:00
Link: CVE-2021-40502

No data.

Status : Modified
Published: 2021-11-10T16:15:08.673
Modified: 2024-11-21T06:24:16.560
Link: CVE-2021-40502

No data.