CVE-2021-27609

Publication date

2021-04-13 18:45:06

Family

sap

State

PUBLISHED

Description

SAP Focused RUN versions 200, 300, does not perform necessary authorization checks for an authenticated user, which allows a user to call the oData service and manipulate the activation for the SAP EarlyWatch Alert service data collection and sending to SAP without the intended authorization.