GHSA-p6vw-54fj-mjm4CriticalCVSS 10.0
SAP Gateway activates the default Access Control List with high privileges allowing...
🔗 CVE IDs covered (1)
📋 Description
SAP Gateway activates the default Access Control List with high privileges allowing categorization of external attacker as internal application server. As a result an unauthenticated attacker with network access to the SAP Gateway could exploit this weakness to potentially perform unauthorized actions within the application environment, resulting in a high impact on the confidentiality, integrity, and availability of the affected system.