Description
A vulnerability in SAP Financial Service Claims Management RFC function ICL_USER_GET_NAME_AND_ADDRESS allows user enumeration and potential disclosure of personal data through response discrepancies, causing low impact on confidentiality with no impact on integrity or availability.
Problem types
CWE-204: Observable Response Discrepancy
Product status
INSURANCE 803
804
805
806
S4CEXT 107
108
109
