CVE-2025-43011CWE-862

Missing Authorization Check in SAP Landscape Transformation (PCL Basis)

High · published May 13, 2025

CVSS v3.1
7.7
EPSS
0%
Percentile
28.0
In the wild
Unconfirmed
What it is

Under certain conditions, SAP Landscape Transformation's PCL Basis module does not perform the necessary authorization checks, allowing authenticated users to access restricted functionalities or data. This can lead to a high impact on confidentiality with no impact on the integrity or availability of the application.

The record
Technical detail
CVSS v3.1
7.7 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00355 · 28.0th percentile
Weakness
CWE-862 · Missing Authorization
Published
2025-05-13T00:20Z
EPSS history
Timeline
  • 13 MAY 00:20Z
    Missing Authorization Check in SAP Landscape Transformation (PCL Basis)
    cvelistv5