SAP S/4HANA Bank Account Application Authorization Check Vulnerability Allowing Attachment Deletion

A vulnerability exists in the Bank Account Application component of SAP S/4HANA due to insufficient authorization checks. This flaw enables an authenticated 'approver' user to delete attachments from the bank account application of other users. The issue results in a low integrity impact, with no effect on data confidentiality or application availability.

Impact

Exploitation of this vulnerability allows for unauthorized deletion of attachments in the bank account application, potentially leading to loss of important information or documentation.

Remediation

Users are advised to review and implement the SAP Security Note associated with this vulnerability. This can be done through the SAP for Me platform, specifically in the Security Notes section. For guidance on accessing and applying SAP Security Notes, refer to the SAP Security Notes FAQs.