SAP OData Service Privilege Escalation Vulnerability in Manage Purchasing Info Records

A vulnerability exists in the OData Service within the Manage Purchasing Info Records application, where necessary authorization checks are not properly enforced for authenticated users. This flaw allows attackers to escalate privileges, although it has a low impact on the application's integrity.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation.

Remediation

Users are advised to review and implement the SAP Security Notes available in SAP for Me. These notes contain important security patches and guidance. For details on the SAP Security Patch Day schedule and how to access SAP Security Notes, refer to the SAP Security Notes FAQ.