SAP NetWeaver Authorization Bypass Vulnerability Allowing Unauthorized Access to ABAP Code

An authorization bypass vulnerability has been identified in SAP NetWeaver, allowing attackers to access ABAP code that typically requires additional validation. Once authenticated in the ABAP system, an attacker can execute a specific transaction that reveals sensitive system code without proper authorization, thereby compromising confidentiality.

Impact

Exploitation of this vulnerability allows for unauthorized access to sensitive ABAP code, bypassing standard authorization checks.

Remediation

Users are advised to consult the SAP Security Notes and implement the necessary patches. SAP Security Patch Day occurs on the second Tuesday of each month. For details on specific patch days, refer to the SAP Security Patch Day Bulletin Archive.