SAP GRC Credential Modification Vulnerability Allowing Non-Administrative User Access

A vulnerability in SAP GRC allows non-administrative users to access and initiate transactions that could modify or control transmitted system credentials. This issue significantly impacts the application's confidentiality, integrity, and availability.

Impact

Exploitation of this vulnerability could lead to unauthorized modification or control of system credentials, causing a high impact on the application's confidentiality, integrity, and availability.

Remediation

Users are advised to review and implement the SAP Security Note related to this vulnerability, available through the SAP for Me platform. This vulnerability will also be addressed in the upcoming SAP Security Patch Day.