SAP Security Note
Medium priority
SAP security note 440221, "User check in TH_REMOTE_TRANSACTION/TH_SAP_LOGIN", is a program error note released on October 8, 2009. Below are the symptom and the SAP recommended solution.
Description
Symptom
When you call the TH_REMOTE_TRANSACTION function module, a dialog can also be opened if you use a non-dialog user in the RFC destination being used.
Solution
Import several Support Packages or implement the correction instructions.
An incomplete correction was delivered with the SAPKB46B34, SAPKB46C26, SAPKB46D15, and SAPKB61007 Support Packages or with the first series of correction instructions for 4.6B, 4.6C, and 4.6D.
You therefore require the current SAPKB46B51, SAPKB46C42, SAPKB46D31, and SAPKB61030 Support Packages or the second series of correction instructions.
Reason and prerequisites
The user type check does not exist in the TH_SAP_LOGIN function module.
CVSS
Score 0
References
This note refers to
Referenced by
Full note on SAP: SAP Support Launchpad note 440221
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].



