SAP Solution Tools Plug-In Authorization Check Vulnerability in ST-PI

A vulnerability exists in the SAP Solution Tools Plug-In (ST-PI) within a function module that fails to implement proper authorization checks for authenticated users. This oversight allows for the unauthorized disclosure of system information. The vulnerability has a low impact on confidentiality, with no effects on integrity or availability.

Impact

Exploitation of this vulnerability could lead to unauthorized disclosure of system information.

Remediation

Users are advised to consult the SAP Security Notes for guidance on addressing this vulnerability. SAP Security Notes can be accessed through the SAP for Me platform, where users can find the complete list of all SAP Security Notes. It is recommended to implement these security corrections as a priority.