SAP Fiori App Intercompany Balance Reconciliation Privilege Escalation Vulnerability Allowing Phishing

A vulnerability in the SAP Fiori App Intercompany Balance Reconciliation has been identified, allowing an attacker with high privileges to send uploaded files to arbitrary email addresses. This capability could be exploited to conduct effective phishing campaigns. The vulnerability has a low impact on the application's confidentiality, integrity, and availability.

Impact

Exploitation of this vulnerability could lead to unauthorized phishing attempts, potentially compromising the email recipients.

Remediation

Users are advised to consult the SAP Security Notes for guidance on addressing this vulnerability. SAP Security Notes can be accessed through the SAP for Me platform.