SAP Approuter in the SAP Business AI Platform does not sufficiently validate certain token content under specific configurations. This flaw allows an unauthenticated attacker to send a specially crafted token that triggers the redirection of sensitive credential material to an attacker-controlled destination. Exploitation complexity is high because it requires non-default environment configurations. The vulnerability is classified as CWE-601 (URL Redirection to Untrusted Site) and has a CVSS 3.1 base score of 7.0, indicating high severity with network attack vector, no privileges required, no user interaction, and impacts confidentiality significantly while only minimally affecting integrity and availability.

Successful exploitation can lead to disclosure of sensitive credential material to an attacker-controlled destination, severely impacting confidentiality. Integrity and availability impacts are low. The attack complexity is high, limiting the likelihood of exploitation in default configurations.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Due to the lack of an official fix or vendor advisory, organizations should monitor SAP's official channels for updates. Until a patch is available, review and restrict configurations that could enable this vulnerability and consider additional controls to protect sensitive credential material from unauthorized redirection.