Skip links
RedRays - Your SAP Security Solution
Picture of Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

SAP Security on Udemy

Generic dataloader missing authority check for BW Objects, SAP security note 1494255

SAP Note 1494255
SAP Security Note
High priority

SAP security note 1494255, “Generic dataloader missing authority check for BW Objects”, is a program error note released on 14.12.2010. Below are the symptom, SAP recommended solution and affected software components.

ComponentSAP Business Warehouse > BW only – Business Content and Extractors > BW only – Please use component SV-SMG-MON-REP
CategoryProgram error
PriorityHigh priority
TypeSAP Security Note
Version2
StatusReleased for Customer
Released on14.12.2010
LanguageEnglish

Description

Symptom

This note concerns the implementation of the generic dataloader, which is used to load the data from the Solution Manager to the BW infrastructure. Authorization for writing the data into the InfoProviders has not been checked.

Solution

Please implement this note to correct this issue.

Reason and prerequisites

Program error

CVSS

Score 0

Affected components

  • BI_CONT: 704, 705

Full note on SAP: SAP Support Launchpad note 1494255

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

#BW generic dataloader authorization check

Explore More