Description
In SAP Business Workflow and SAP Flexible Workflow, an authenticated attacker can manipulate a parameter in an otherwise legitimate resource request to view sensitive information that should otherwise be restricted. The attacker does not have the ability to modify the information or to make the information unavailable.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP_SE | SAP Business Workflow and SAP Flexible Workflow | SAP_BASIS 753, SAP_BASIS 754, SAP_BASIS 755, SAP_BASIS 756, SAP_BASIS 757, SAP_BASIS 758, SAP_BASIS 912, SAP_BASIS 913, SAP_BASIS 914 | — |
Advisories 2
- NCSC-2025-0007 Kwetsbaarheden verholpen in SAP producten NCSC-NL (Netherlands) · Jan 14, 2025
- WID-SEC-2025-0051 SAP Patchday Januar 2025: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 13, 2025