SAP Missing Authorization Check Vulnerability Allowing Unauthorized Data Access

A vulnerability exists in certain SAP products due to a lack of proper authorization checks. This flaw enables an authenticated attacker to invoke a remote-enabled function module, potentially accessing data that should be restricted. However, the attacker cannot alter data or affect system availability.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive data.

Remediation

Users are advised to review and implement the latest SAP Security Notes. These security patches are available through the SAP Security Patch Day, which occurs on the second Tuesday of each month. For more information, consult the SAP Security Notes FAQs.