SAP NetWeaver Application Server ABAP Background Remote Function Call Authorization Vulnerability

A vulnerability exists in SAP NetWeaver Application Server ABAP and ABAP Platform, allowing authenticated, low-privileged users to execute background Remote Function Calls without the necessary S_RFC authorization in certain situations. This flaw could lead to significant integrity and availability issues, while not affecting the application's confidentiality.

Impact

Exploitation of this vulnerability could result in unauthorized background Remote Function Calls, potentially disrupting application availability and integrity.

Remediation

Users are advised to consult the SAP Security Notes for guidance on addressing this vulnerability. SAP Security Notes can be accessed through the SAP for Me platform, specifically on SAP Security Patch Days, which occur on the second Tuesday of each month.