CyberRota Analysis
AI-GeneratedAn authenticated attacker can exploit a missing authorization check in the Application Server ABAP of SAP NetWeaver and ABAP Platform, potentially gaining unauthorized access to sensitive system configuration information. While the impact on confidentiality is low, the exposure of security-relevant settings may pose a risk to overall system integrity. Organizations using these SAP products should prioritize addressing this vulnerability to safeguard their internal configurations.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Due to a missing authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform, an authenticated attacker could gain unauthorized access to sensitive system configuration information. Successful exploitation could result in exposure of security relevant settings and internal system details, resulting in low impact on confidentiality while integrity and availability remain unaffected.