| Package | Affected versions | Patched versions |
|---|---|---|
| approuter | < 23.0.0 | 23.0.0 |
SAP Approuter does not correctly validate client certificates in certain callback flows. An attacker with low privileges, holding a certificate from the same trusted authority with matching subject values, could bypass the identity check. This complexity makes the attack difficult to execute. Successful exploitation could allow impersonation of a trusted internal component, resulting in a high impact on integrity and a low impact on confidentiality and availability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free