Access Control Flaw in SAP Netweaver Business Warehouse by SAP

CVE-2014-5174

Summary

The SAP Netweaver Business Warehouse component exhibits an access control vulnerability within the BW-SYS-DB-DB4 function group. This flaw permits remote authenticated users to exploit the system and potentially access sensitive information by circumventing intended authorizations. The absence of proper restrictions enables these users to engage with functions that should otherwise be protected, potentially leading to significant data exposure. Organizations utilizing these systems should explore implementing appropriate security measures to mitigate these risks.

References