CVE-2013-3061 in SAP Industry-Specific Components for Hospitals

Resumen (Inglés)

The ISHMED-PATRED_TRANSACT_RFCCALL function in the IS-H Industry-Specific Component Hospital subsystem in SAP Healthcare Industry Solution, and the SAP ERP central component (aka ECC 6), allows remote authenticated users to bypass intended transaction restrictions via unspecified vectors.

Reservar

2013-04-15

Divulgación

2013-05-01

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
8449	SAP Industry-Specific Components for Hospitals ISHMED-PATRED_TRANSACT_RFCCALL escalada de privilegios	264	Prueba de concepto	Arreglo oficial	CVE-2013-3061