SAP Business Workflow and Flexible Workflow Sensitive Information Disclosure Vulnerability

A vulnerability exists in SAP Business Workflow and SAP Flexible Workflow, allowing authenticated attackers to manipulate parameters in legitimate resource requests. This manipulation can lead to unauthorized access to sensitive information that is normally restricted. However, the attackers cannot modify or disrupt the availability of the information.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive information.

Remediation

Users are advised to review and implement the SAP Security Note associated with this vulnerability. This can be done through the SAP for Me platform, where all Security Notes are available. For details on the next SAP Security Patch Day, refer to the SAP Security Patch Day Bulletin Archive.