Description
Due to missing authorization check in SAP for Oil & Gas (Transportation and Distribution), an attacker authenticated as a non-administrative user could call a remote-enabled function which will allow them to delete non-sensitive entries in a user data table. There is no effect on confidentiality or availability.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
SAP_SE SAP for Oil & Gas
Default version status: unaffected
600affected602affected603affected604affected605affected606affected617affected618affected800affected802affected803affected804affected805affected806affected807affected