SAP S/4HANA Authorization Check Vulnerability in Manage Central Purchase Contract

A vulnerability exists in SAP S/4HANA Manage Central Purchase Contract due to insufficient authorization checks for authenticated users. This flaw allows an attacker to execute function imports on the entity, potentially making it accessible to users without proper authorization. The vulnerability has a low impact on the application's confidentiality and availability.

Impact

Exploitation of this vulnerability could lead to unauthorized access to functions within the application, allowing users to perform actions or access data without the necessary permissions.

Remediation

Users are advised to review and implement the SAP Security Note associated with this vulnerability. This can be done through the SAP for Me platform, specifically in the Security Notes section. For details on the next SAP Security Patch Day, refer to the SAP Security Patch Day Bulletin.