Threats tagged 'ghsa-qpx6-8hqw-xr2c'

A broken access control vulnerability in SAP NetWeaver AS Java allows unauthenticated attackers to invoke certain SOAP operations over HTTP without proper authorization. Exploitation could lead to unauthorized disclosure of information accessible through the affected service. The impact is limited to confidentiality, with no effect on integrity or availability.