SAP Cloud Connector Missing Authorization Check Vulnerability Allowing Performance Impact

A vulnerability exists in SAP Cloud Connector due to a missing authorization check. An attacker on an adjacent network with low privileges could send a crafted request to the endpoint that tests LDAP connections. Exploitation of this vulnerability could lead to a decrease in service performance, causing a low impact on availability. The vulnerability does not affect the confidentiality or integrity of data.

Impact

Exploitation of this vulnerability could result in a low impact on the availability of the service, causing reduced performance.

Remediation

Users are advised to review and implement the SAP Security Note related to this vulnerability, available through the SAP for Me platform. This vulnerability will also be addressed in the upcoming SAP Security Patch Day.