Skip links
Picture of Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

Security note aco_bsp_admin Start only with ICF auth., SAP security note 1161689

Description

You want the BSP application aco_bsp_admin to be called only by users that have ICF authorization.

Available fix and Supported packages

  • CPROJECTS | 300 | 300
  • CPROJECTS | 310_620 | 310_640
  • CPRXRPM | 400 | 400
  • CPROJECTS 310_620 | SAPK-31215INCPROJECT |
  • CPROJECTS 310_640 | SAPK-31415INCPROJECT |
  • CPRXRPM 400 | SAPK-40013INCPRXRPM |

Affected component

    PPM-PRO
    Project Management

CVSS

Score: 0

PoC

Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.

URL

https://launchpad.support.sap.com/#/notes/1161689

TAGS

#This-problem-is-caused-by-a-program-error.

Explore More

SAP Security Patch Day – September 2025

SAP has released its September 2025 security patch package containing 26 security notes addressing critical vulnerabilities across enterprise SAP environments. This release

SAP Security Patch Day – August 2025

SAP has released its August 2025 security patch package containing 19 security notes addressing critical vulnerabilities across enterprise SAP environments. This release