SAP NetWeaver Missing Authorization Check in RFC Function Module Vulnerability in Transaction SDCCN

A vulnerability exists in an RFC-enabled function module within the SAP NetWeaver platform, specifically in transaction SDCCN. The issue arises from a missing authorization check, allowing an unauthenticated attacker to generate technical metadata. This vulnerability has a low impact on integrity, with no effects on confidentiality or availability.

Impact

Exploitation of this vulnerability could lead to unauthorized generation of technical metadata, potentially allowing for further attacks or exploitation of other vulnerabilities.

Remediation

Users are advised to review the SAP Security Notes related to this vulnerability and implement the recommended patches. SAP Security Notes can be accessed through the SAP for Me platform.