Missing authorization check in BW-PLA-BPC-ADM, SAP security note 2228520

Description

An authenticated user can use functions of BW-PLA-BPC-ADM to which access should be restricted. This may result in an escalation of privileges.

Available fix and Supported packages

SAP_BW | 740 | 740
SAP_BW | 750 | 750

Affected component

CVSS

Score: 0

Exploit

Exploit is not available.
For detailed information please contact the mail [email protected]

URL

https://launchpad.support.sap.com/#/notes/2228520

TAGS

#Authorization
#authorization-check
#BW-PLA-BPC-ADM

More to explorer

RedRays Offers Support to Startups Listing on SAP Store

February 26, 2023

RedRays is a startup that was founded in January 2021. Throughout our journey, we have been fortunate to receive support and guidance

Threat Modeling: An Overview of PASTA Methodology

February 23, 2023

I would like to briefly introduce the Threat Modeling methodology in this blog post. This will be the initial part of the

SAP Security Patch Day – February 2023

February 14, 2023

SAP Security Patch Day is a monthly event during which SAP releases security updates for their software products. These updates address potential

3242933 – [CVE-2022-39802] File path traversal vulnerability in SAP Manufacturing Execution

October 12, 2022

General information Risk: CRITICAL Versions Affected:SAP MFG EXECUTION CORE 15.1SAP MFG EXECUTION CORE 15.2SAP MFG EXECUTION CORE 15.3Vendor URL: https://sap.comBug: File path traversal

Arpine Maghakyan