Detections
Analytics
CVE-2021-27609
medium
Description
SAP Focused RUN versions 200, 300, does not perform necessary authorization checks for an authenticated user, which allows a user to call the oData service and manipulate the activation for the SAP EarlyWatch Alert service data collection and sending to SAP without the intended authorization.
References
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=573801649