SAP S4CORE OData Missing Authorization Check Vulnerability Allowing Access to Restricted Information

A vulnerability exists in SAP S4CORE OData due to a missing authorization check on meta-data properties, allowing authenticated attackers to access restricted information. This issue could lead to a low impact on confidentiality, while integrity and availability are not affected.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive information, potentially leading to data exposure or misuse.

Remediation

Users are advised to review and implement the relevant SAP Security Notes. These can be accessed through the SAP for Me platform, specifically in the 'All Security Notes' section. For details on upcoming SAP Security Patch Days, refer to the SAP Security Patch Day Bulletin.