SAP Production Operator Dashboards Security Misconfiguration Vulnerability Allowing Unauthenticated Data Access

A security misconfiguration vulnerability in SAP Production Operator Dashboards (PODs) allows outside users to access customer data through these dashboards. The vulnerability arises because there are no mechanisms to enforce authentication, enabling malicious unauthenticated users to view non-sensitive customer information. However, this issue does not impact data integrity or availability.

Impact

Exploitation of this vulnerability could lead to unauthorized access to non-sensitive customer information via Production Operator Dashboards.

Remediation

Customers are advised to review and implement the latest SAP Security Notes. Instructions for accessing SAP Security Notes can be found on the SAP Security Patch Day website.