SAP MDG Review Match Groups Application does not perform necessary authorization checks for authenticated users. This flaw can allow a low‑privileged user to perform actions that should be restricted, effectively enabling privilege escalation with low impact on integrity and no impact on confidentiality or availability.

The CVE affects the SAP MDG Review Match Groups Application from SAP SE. No specific versions are listed; users should verify that their installation of the Review Match Groups Application is up‑to‑date with the latest SAP patch or note 3673181.

The CVSS score of 4.3 classifies this vulnerability as low. Without an available EPSS score, the probability of exploitation is uncertain, but the absence of a KEV listing suggests that there are no known active exploits. Exploitation requires authentication and a user with low privileges; the attacker can then obtain elevated privileges through the missing authorization checks, but the effect is limited to privileged actions within the application, with no impact on data confidentiality or availability.