The vulnerability arises from a function module that fails to perform correct authorization checks after a user authenticates. Because the module grants access to sensitive data, an attacker can extract confidential information without compromising integrity or availability. This flaw is categorized as CWE‑862 and delivers a high confidentiality impact.

Affected products include SAP Solution Tools Plug‑In (ST‑PI) versions 2008_1_700, 2008_1_710, 740, and 758. These releases are distributed by SAP and are identified by the corresponding CPE strings listed in the vulnerability record.

The CVSS score of 7.7 indicates significant risk. The EPSS score of less than 1 % suggests low current exploitation probability, and the issue is not listed in the CISA KEV catalog. The likely attack path requires an authenticated session; once logged in, an attacker can invoke the exposed function module to read sensitive data. No additional prerequisites are described, so the flaw is potentially exploitable by any user who can authenticate to the system.