SAP S/4HANA Missing Authorization Check Vulnerability Allowing Unauthorized File Deletion

A vulnerability exists in SAP S/4HANA (Private Cloud and On-Premise) due to a missing authorization check. This flaw allows an authenticated user to delete files on the operating system, gaining unauthorized control over file operations. While this vulnerability could lead to no impact on confidentiality, it poses a low risk to the integrity and availability of the application.

Impact

Exploitation of this vulnerability could result in unauthorized file deletion on the operating system, allowing for potential disruption of application availability and integrity.

Remediation

Users are advised to consult the SAP Security Notes for guidance on addressing this vulnerability. SAP Security Notes can be accessed through the SAP for Me platform, specifically on the SAP Security Patch Day.