SAP Bank Account Management Information Disclosure Vulnerability

SAP Bank Account Management is a bank account management system from SAP, a German company. An information disclosure vulnerability exists in the SAP Bank Account Management application, which stems from the fact that when a user clicks on a smart link to navigate to another application, personal data is displayed directly in its URL. They could be captured in log files, bookmarks, etc., which could compromise sensitive data from the application. An attacker could exploit the vulnerability to obtain sensitive information.