SAP Note 1644043
SAP security note 1644043, "Missing authorization check in CA-GTF-TS-GMA". Below are the symptom and SAP recommended solution.
Description
Symptom
An authenticated user can use functions of CA-GTF-TS-GMA to which access should be restricted. This may result in an escalation of privileges.
Solution
Implement this note to address the missing authorization checks and prevent privilege escalation.
Reason and prerequisites
CA-GTF-TS-GMA lacks authorization checks for certain functions, potentially leading to undesired system behavior.
CVSS
Score 2.1 Vector: AV:N/AC:H/AU:S/C:P/I:N/A:N
Full note on SAP: SAP Support Launchpad note 1644043
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].