SAP security note 1456755, "Hard-coded credentials in Web Dynpro ABAP", is a program error note released on September 14, 2010. Below are the symptom and SAP recommended solution.
Description
Symptom
Web Dynpro ABAP contains code that changes the program’s behavior when a user successfully authenticates with a certain username.
Solution
Apply the appropriate service pack or follow the provided correction instructions to resolve the issue.
Reason and prerequisites
The program code includes a hard-coded username that alters the system’s behavior upon successful user authentication. This allows the user to change the behavior of WebDynpro ABAP rendering, which is not intended.
Full note on SAP: SAP Support Launchpad note 1456755
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].