SAP security note 1363371, “FS-CD: Missing authorization checks SAPRGEN_CD”, is a note. Below are the symptom, reason and prerequisites, SAP recommended solution and the affected software components.
Description
Symptom
Using the program SAPRGEN_CD, various includes are generated in FS-CD depending on Customizing. However, the relevant authorization checks for the generation are missing. As a result, users with insufficient authorizations can perform the generation process as well.
Solution
This note ensures that the relevant authorization checks are run.
Reason and prerequisites
This note is relevant for the application component FS-CD only. The authorization checks have not been taken into account up to now.
Affected components
- INSURANCE 464
- INSURANCE 471
- INSURANCE 472
- INSURANCE 600
- INSURANCE 602
- INSURANCE 603
- INSURANCE 604
Full note on SAP: SAP Support Launchpad note 1363371
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].