Potential information disclosure relating to ECC and SAP R/3, SAP security note 1453541

SAP security note 1453541, "Potential information disclosure relating to ECC and SAP R/3". Below are the symptom, SAP recommended solution and the affected software components.

Description

Symptom

A malicious user can discover information relating to arbitrary database table content.

Solution

Please apply the attached correction instructions or the HR Support Package in which these corrections have been included.

Reason and prerequisites

Any information stored in SAP database tables can be discovered through the use of ABAP programs RPUDTEM0 and RPUDTEM1. A valid and authenticated user with authorization for transaction SA38 or SE38 is required.

Affected components

• Personnel Management > Personnel Administration > Denmark (PA-PA-DK)