SAP Missing Authorization Check Vulnerability Allowing Unauthorized File Access

A vulnerability exists in certain SAP products due to a lack of proper authorization checks, allowing unauthorized users to access files belonging to other companies. This issue could result in the unauthorized disclosure of personal data related to employees. However, it does not affect the integrity or availability of the data.

Impact

Exploitation of this vulnerability could lead to unauthorized access to files, potentially disclosing personal employee data.

Remediation

Users are advised to review and implement the SAP Security Note associated with this vulnerability. This can be done through the SAP for Me platform, specifically in the Security Notes section. For details on the next SAP Security Patch Day, refer to the SAP Security Patch Day schedule.