CyberRota Analysis
AI-GeneratedSAP Approuter is vulnerable due to insufficient validation of tenant context in inbound requests, allowing unauthenticated attackers to spoof tenant information. While the potential access to another tenant's data is limited, it poses a low risk to confidentiality. Organizations using SAP Approuter should prioritize addressing this vulnerability to mitigate any potential data exposure risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
SAP Approuter does not sufficiently validate tenant context in inbound requests. An unauthenticated attacker could send specially crafted requests to spoof the tenant context under conditions not fully within their control. Successful exploitation could allow limited access to another tenant's information, resulting in a low impact on confidentiality. There is no impact on integrity and availability.