CVE-2013-3061 | BDVDB-2026-55679 Detail

Description#

The ISHMED-PATRED_TRANSACT_RFCCALL function in the IS-H Industry-Specific Component Hospital subsystem in SAP Healthcare Industry Solution, and the SAP ERP central component (aka ECC 6), allows remote authenticated users to bypass intended transaction restrictions via unspecified vectors.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://service.sap.com/sap/support/notes/1691744
http://www.esnc.de/sap-security-audit-and-scan-services/security-advisories/36-privilege-escalation-in-sap-is-healthcare
http://scn.sap.com/docs/DOC-8218
http://archives.neohapsis.com/archives/bugtraq/2013-04/0176.html

Exploit#

No public exploit known

History#

Version 12013-05-01Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.