Description
At present if View Maintenance Authorization Enhancement has been implemented in a system, any Application table, that has a maintenance dialog, can lead to improper information disclosure. The note 1030838(Valid from release 610 upto 700) or note 1381945(Valid for release 701 upto 710) should have been implemented in the system for this symptom to occur.
Available fix and Supported packages
- SAP_BASIS | 620 | 640
- SAP_BASIS | 700 | 702
- SAP_BASIS | 710 | 720
- SAP_BASIS 710 | SAPKB71010 |
- SAP_BASIS 711 | SAPKB71105 |
- SAP_BASIS 620 | SAPKB62068 |
- SAP_BASIS 640 | SAPKB64026 |
- SAP_BASIS 720 | SAPKB72003 |
- SAP_BASIS 702 | SAPKB70203 |
- SAP_BASIS 700 | SAPKB70022 |
- SAP_BASIS 701 | SAPKB70107 |
Affected component
- BC-CUS-TOL-TME
View Maintenance Tool
CVSS
Score: 0
PoC
Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.
URL
https://launchpad.support.sap.com/#/notes/1411818
