Privilege Escalation Vulnerability in SAP Business Planning and Consolidation

CVE-2022-41268

Summary

A vulnerability exists within specific SAP standard roles in SAP Business Planning and Consolidation. This flaw allows a malicious user to exploit a transaction code intended for customer use, potentially granting them unauthorized access. If successful, this could lead to an attacker escalating their privileges, enabling them to read, modify, or delete sensitive system data, posing significant risks to data confidentiality and integrity.

References