SAP NetWeaver Privilege Escalation Vulnerability in ABAP Class Builder

A privilege escalation vulnerability has been identified in SAP NetWeaver's ABAP Class Builder. The issue arises from a missing authorization check, which allows an attacker to gain higher access levels than intended. Successful exploitation of this vulnerability could lead to the disclosure of highly sensitive information and significantly impact the application's integrity and availability.

Impact

Exploitation of this vulnerability could result in unauthorized access to higher privilege levels, allowing for the disclosure of sensitive information and potential disruption to the application's integrity and availability.

Remediation

Users are advised to review and implement the SAP Security Note associated with this vulnerability. This can be done through the SAP for Me platform, specifically during the monthly SAP Security Patch Day.