SAP fixes gaping authentication bypass flaw after 3 YEARS

ERPScan reveals wide open door for miscreants

A critical SAP vulnerability stayed unpatched for three years prior to its resolution this week, according to application security specialists."