SAP Enterprise Financial Services versions 6.05 6.06 6.16 6.17 6.18 8.0 (in business function EAFS_BCA_BUSOPR_SEPA) does not perform necessary authorization checks for an authenticated user resulting in escalation of privileges.