CyberRota Analysis
AI-GeneratedSAP Manufacturing Integration and Intelligence (MII) lacks proper authorization checks for certain application functions, enabling low-privileged authenticated users to access restricted account information intended for privileged users. While the vulnerability primarily affects data confidentiality, it poses a risk of further attacks against user accounts. Organizations utilizing SAP MII should prioritize patching this vulnerability to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
SAP Manufacturing Integration and Intelligence (MII) does not perform necessary authorization check on certain application function, allowing a low-privileged authenticated attacker to access information that should be restricted to privileged users. Successful exploitation could allow the attacker to access the users account information in the application, which could be leveraged to facilitate further attacks against the identified user accounts. This vulnerability results in low impact on confidentiality of the data, with no impact on the integrity and availability