SAP security note 1477759, "Hard-coded logon information for iPPE resources", is a program error note released on 14.12.2010. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
A hard-coded user name may result in a changed system response if a user uses this name for authentication in the system. In this case, data from the iPPE resources area could be deleted.
Solution
Implement the attached correction instructions in your system.
Reason and prerequisites
The program code contains a hard-coded user name. If a user successfully logs on to the system with this name, unwanted actions can be executed (deleting data).
Affected components
- DIMP: 471
- ISPSADIN: 10A
- ECC-DIMP: 500, 600, 602, 603, 604, 605
- DI: 46C2
Full note on SAP: SAP Support Launchpad note 1477759
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
