CyberRota Analysis
AI-GeneratedSAP Advanced Planning and Optimization (Model Mix Planning) contains a hardcoded credential in its source code that can be exploited by attackers with high privileges to bypass authorization checks. This vulnerability allows unauthorized deletion of specific planning-related restrictions, potentially compromising the application's confidentiality and integrity. Organizations using this SAP application should prioritize addressing this issue to mitigate the risk of unauthorized access and data manipulation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
SAP Advanced Planning and Optimization (Model Mix Planning) contains a hardcoded credential within the source code of the application to perform authorization check to access certain functionalities in the application. An attacker with high privileges could leverage this hardcoded credential to bypass authorization and delete specific planning-related restrictions in the application. Successful exploitation could result in a low impact on confidentiality and integrity, with no impact on availability of the application.