SAP NetWeaver Process Integration Access Control Error Vulnerability (CNVD-2023-65180)

SAP NetWeaver Process Integration (PI) is an SAP enterprise application integration software from SAP, Germany, and is a component of the NetWeaver product group. The component is mainly used for the exchange of information between the internal system and the external. An access control error vulnerability exists in SAP NetWeaver Process Integration, which stems from not performing authentication checks for certain functions that require a user’s identity. An attacker could exploit the vulnerability to cause unauthorized access.