So kind of SAP NetWeaver to hand out admin accounts to anyone who can reach it. You’ll want to patch this • The Register

https://www.theregister.com/2020/07/14/sap_recon_bug/