SAP Application Server ABAP Information Disclosure Vulnerability

A vulnerability allowing information disclosure has been identified in SAP Application Server ABAP. This issue arises from an authenticated attacker being able to read unmasked values presented in ABAP Lists. Exploitation of this vulnerability could lead to unauthorized data disclosure, significantly impacting confidentiality.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive data, with a high impact on confidentiality.

Remediation

Users are advised to consult the SAP Security Notes for guidance on applying necessary patches. SAP Security Patch Day occurs on the second Tuesday of each month, where security updates are released. For more information, visit the SAP Security Patch Day page on SAP for Me.