SAP NetWeaver Process Integration Information Disclosure Vulnerability (CNVD-2024-13560)

SAP NetWeaver Process Integration (PI) is an SAP enterprise application integration software from SAP, Germany, and is a component of the NetWeaver product group. The component is mainly used for the exchange of information between the internal system and the external. An information disclosure vulnerability exists in SAP NetWeaver Process Integration that stems from the application’s inadequate protection of sensitive information and can be exploited by an attacker to gain access to information that would otherwise be restricted.