SAP S/4HANA and SAP ERP HCM Portugal Missing Authorization Check Vulnerability Allowing Unauthorized Data Access

A vulnerability exists in SAP S/4HANA HCM Portugal and SAP ERP HCM Portugal due to a missing authorization check. This flaw allows a user with high privileges to access sensitive data belonging to another company, posing a significant risk to data confidentiality.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive data, potentially causing data breaches or misuse of confidential information.

Remediation

Users are advised to consult the SAP Security Notes for guidance on addressing this vulnerability. SAP Security Notes can be accessed through the SAP for Me platform, where users can find the complete list of security updates and patches. It is recommended to implement these corrections as a priority.