SAP Business Warehouse and SAP BW/4HANA BEx Tools Improper Authorization Vulnerability Allowing Elevated Access

A vulnerability exists in SAP Business Warehouse and SAP BW/4HANA BEx Tools, where improper authorization checks allow an authenticated attacker to gain higher access levels than intended. This could lead to unauthorized deletion of user table entries, potentially impacting data integrity. However, this vulnerability does not affect the confidentiality or availability of the application.

Impact

Exploitation of this vulnerability could allow for unauthorized access privileges, enabling an attacker to delete user table entries and disrupt data integrity.

Remediation

Users are advised to review and implement the SAP Security Note associated with this vulnerability. This can be done through the SAP Security Patch Day, which occurs on the second Tuesday of each month. For more information, consult the SAP Security Notes FAQ.