Sap Advanced Planning And Optimization Model Mix Planning
Monthly
Hardcoded credentials embedded in SAP Advanced Planning and Optimization (Model Mix Planning) source code enable authenticated high-privilege attackers to bypass the application's authorization layer and delete specific planning-related restrictions. Confirmed by SAP via Security Note 3763028 and disclosed on SAP Security Patch Day, the flaw spans a wide range of APO versions including SCM 700, S4CORE, and S4COREOP release lines. No public exploit code exists and the vulnerability is not listed in CISA KEV; real-world impact is constrained by the high-privilege prerequisite and limited to low-severity confidentiality and integrity effects.
Hardcoded credentials embedded in SAP Advanced Planning and Optimization (Model Mix Planning) source code enable authenticated high-privilege attackers to bypass the application's authorization layer and delete specific planning-related restrictions. Confirmed by SAP via Security Note 3763028 and disclosed on SAP Security Patch Day, the flaw spans a wide range of APO versions including SCM 700, S4CORE, and S4COREOP release lines. No public exploit code exists and the vulnerability is not listed in CISA KEV; real-world impact is constrained by the high-privilege prerequisite and limited to low-severity confidentiality and integrity effects.