CVE-2021-27609

Name of the Vulnerable Software and Affected Versions SAP Focused RUN versions 200, 300

Description The issue concerns a lack of necessary authorization checks for authenticated users, allowing them to manipulate the activation for the SAP EarlyWatch Alert service data collection and sending to SAP without proper authorization. This can be achieved by calling the oData service.

Recommendations For SAP Focused RUN versions 200, 300, consider restricting access to the oData service until a fix is available to prevent unauthorized manipulation of the SAP EarlyWatch Alert service.