SAP ABAP Systems Authorization Check Vulnerability in Remote-Enabled Function Modules

A vulnerability exists in ABAP-based SAP systems where a remote-enabled function module fails to implement necessary authorization checks for authenticated users. This oversight leads to unauthorized disclosure of system information. While this vulnerability has a low impact on confidentiality, it does not affect integrity or availability.

Impact

Exploitation of this vulnerability allows for unauthorized information disclosure from the affected system.

Remediation

Users are advised to consult the SAP Security Notes for guidance on addressing this vulnerability. SAP Security Notes can be accessed through the SAP for Me platform, where users can find the complete list of all SAP Security Notes. It is recommended to implement these security corrections as a priority.