SAP S/4HANA Manage Bank Statements Functionality Bypass Vulnerability

A vulnerability in the Manage Bank Statements feature of SAP S/4HANA allows authenticated attackers to bypass certain application functionality restrictions and upload files to a reversed bank statement. This issue impacts the application's integrity, while leaving confidentiality and availability unaffected.

Impact

Exploitation of this vulnerability allows for unauthorized file uploads to reversed bank statements, potentially leading to integrity issues within the application.

Remediation

Users are advised to review the SAP Security Notes related to this vulnerability and implement the recommended patches. SAP Security Notes can be accessed through the SAP for Me platform.