Skip links
RedRays - Your SAP Security Solution
Picture of Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

SAP Security on Udemy

Potential disclosure of persisted data in IS-A VMS, SAP security note 1491359

SAP Note 1491359
SAP Security Note
High priority

SAP security note 1491359, "Potential disclosure of persisted data in IS-A VMS", is a program error note released on 31.07.2012. Below are the symptom and SAP recommended solution.

ComponentIndustry-Specific Components > Automotive > Vehicle Management System (IS-A-VMS)
PriorityCorrection with high priority
TypeSAP Security Note
Version2
StatusReleased for Customer
Released on31.07.2012
LanguageEnglish

Description

Symptom

A malicious user can exploit the Vehicle Management System (VMS) and use specially crafted inputs to execute arbitrary database commands. This vulnerability allows the retrieval, modification, or removal of data persisted by the system.

Solution

Implement the attached corrections provided in the support packages.

CVSS

Score 0

Full note on SAP: SAP Support Launchpad note 1491359

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

#Vehicle Management System #IS-A-VMS #Automotive

Explore More