Description
Under certain conditions SAP Permit to Work
allows an authenticated attacker to access information which would otherwise be
restricted causing low impact on the confidentiality of the application.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP_SE | SAP Permit to Work | UIS4HOP1 800, 900 | — |
Advisories 4
- NCSC-2025-0076 Kwetsbaarheden verholpen in SAP software NCSC-NL (Netherlands) · Mar 11, 2025
- WID-SEC-2025-0521 SAP Patchday März 2025: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 10, 2025
- NCSC-2024-0333 Kwetsbaarheden verholpen in SAP producten NCSC-NL (Netherlands) · Aug 13, 2024
- WID-SEC-2024-1818 SAP Security Patch Day – August 2024 BSI CERT-Bund (WID) · Aug 12, 2024