Security Advisory

CVE-2021-27609

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-04-13 18:45:06
Last updated 2024-08-03 21:26:10
Assigner sap
CVSS score 4.6
State PUBLISHED

Description

SAP Focused RUN versions 200, 300, does not perform necessary authorization checks for an authenticated user, which allows a user to call the oData service and manipulate the activation for the SAP EarlyWatch Alert service data collection and sending to SAP without the intended authorization.