SAP security note 1497335, “Hard-coded credentials in BC-SRV-KPR-RET and BC-SRV-KPR-DMF”, is a note. Below is the security information published by SAP for this note.
Description
#### Symptom BC-SRV-KPR-RET and BC-SRV-KPR-DMF contain code which changes the program's behavior when a user successfully authenticates with a certain username.
#### Other Terms Backdoor, hard-coded, credentials, BC-SRV-KPR-RET, BC-SRV-KPR-DMF
#### Reason and Prerequisites The program code contains a hard-coded username which changes the system's behavior should a user authenticate successfully. The user may obtain additional information which should not be displayed.
#### Solution Please implement the note or import the relevant support package.
Full note on SAP: SAP Support Launchpad note 1497335
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
