Description
Due to a missing authorization check in SAP Cloud Connector, an attacker on an adjacent network with low privileges could send a crafted request to the endpoint responsible for testing LDAP connections. A successful exploit could lead to reduced performance, hence a low-impact on availability of the service. Confidentiality and integrity of the data are not affected.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP_SE | SAP Cloud Connector | SAP_CLOUD_CONNECTOR 2.0 | — |
Advisories 2
- WID-SEC-2025-1758 SAP Patchday August 2025: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 7, 2025
- NCSC-2025-0245 Kwetsbaarheden verholpen in SAP producten NCSC-NL (Netherlands) · Sep 5, 2025