SAP S4CORE OData Metadata Property Data Tampering Vulnerability

A data tampering vulnerability has been identified in the OData metadata property of SAP S4CORE. This issue allows an attacker to externally modify the entity set, potentially leading to a low impact on the application's integrity. The vulnerability does not affect confidentiality or availability.

Impact

Exploitation of this vulnerability could result in unauthorized modifications to the OData entity set, causing a low integrity impact on the application.

Remediation

Users are advised to review and implement the SAP Security Note associated with this vulnerability. This can be done through the SAP Security Patch Day, which occurs on the second Tuesday of each month. For more information, consult the SAP Security Notes FAQs.