CVE-2020-6311

CVE-2020-6311 is an improper authorization vulnerability affecting SAP Bank Analyzer (version 500) and SAP S/4HANA for Financial Products Subledger (version 100). An authenticated user can exploit this flaw to create incorrect authorization proposals, potentially leading to privilege escalation and exposure of restricted banking data. Rated Medium severity with a CVSS score of 6.5, it can be exploited over the network with low attack complexity, impacting confidentiality. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion, though it did receive limited media coverage.