SAP RFC Authorization Bypass Vulnerability in Transaction SDCCN Allowing Integrity Impact

A vulnerability exists in an RFC-enabled function module within transaction SDCCN due to a lack of proper authorization checks. This flaw allows authenticated attackers to generate technical metadata, potentially leading to a low impact on data integrity. The vulnerability does not affect confidentiality or availability.

Impact

Exploitation of this vulnerability could result in unauthorized modification of technical metadata, causing a low impact on data integrity.

Remediation

Users are advised to review and implement the SAP Security Note associated with this vulnerability. This can be done through the SAP for Me platform, specifically in the Security Notes section. For details on the SAP Security Patch Day schedule and guidance, refer to the SAP Security Notes FAQ.