Sap S 4Hana Linear Asset Management Rap Business Object
Monthly
Improper authorization checks in SAP S/4HANA's Linear Asset Management RAP business object allow an authenticated, low-privilege user with local/interactive access to modify associated business object data for which they lack authorization, producing a high integrity impact with no confidentiality or availability impact (CVSS 4.7). Exploitation requires high attack complexity and specific runtime or data-association conditions, and no remote or unauthenticated path is described; no public exploit identified at time of analysis. SAP has assigned CWE-862 and published remediation guidance via SAP Security Note 3799621.
Improper authorization checks in SAP S/4HANA's Linear Asset Management RAP business object allow an authenticated, low-privilege user with local/interactive access to modify associated business object data for which they lack authorization, producing a high integrity impact with no confidentiality or availability impact (CVSS 4.7). Exploitation requires high attack complexity and specific runtime or data-association conditions, and no remote or unauthenticated path is described; no public exploit identified at time of analysis. SAP has assigned CWE-862 and published remediation guidance via SAP Security Note 3799621.