SAP NetWeaver AS ABAP and ABAP Platform have a vulnerability where insufficient verification of incoming authentication assertions can allow an unauthenticated attacker to bypass authentication and impersonate arbitrary users, including privileged accounts. This can lead to full system compromise and impact connected systems. The vulnerability has a critical severity with a CVSS score of 10. No affected versions or patch information are provided.