CyberRota Analysis
AI-GeneratedSAP Approuter is vulnerable due to inadequate validation of incoming requests, allowing low-privileged attackers to craft requests that bypass authorization checks and access protected resources. This could lead to unauthorized reading of sensitive data and limited modifications, significantly impacting confidentiality while maintaining integrity and availability. Organizations using SAP Approuter should prioritize addressing this vulnerability to mitigate potential data exposure risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
SAP Approuter does not sufficiently validate certain incoming requests before forwarding them to backend destinations. Due to the complexity of the required conditions, an attacker with low privileges could send specially crafted requests to bypass authorization checks and reach protected resources beyond their assigned scope. Successful exploitation could allow the attacker to read sensitive data and perform limited modifications on protected resources, resulting in a high impact on confidentiality and a low impact on integrity. There is no impact on availability.