CVE-2025-43011 — Missing Authorization Check in SAP Landscape Transformation (PCL Basis)

Description (CNA)

Under certain conditions, SAP Landscape Transformation's PCL Basis module does not perform the necessary authorization checks, allowing authenticated users to access restricted functionalities or data. This can lead to a high impact on confidentiality with no impact on the integrity or availability of the application.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP Landscape Transformation (PCL Basis)	affected DMIS 2011_1_700; affected 2011_1_710; affected 2011_1_730; affected 2011_1_731; affected 2018_1_752; affected 2020; affected S4CORE 102; affected 103; affected 104; affected 105; affected 106; affected 107; affected 108

CWE

CWE-862

References

https://me.sap.com/notes/3591978
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.