SAP Security Note
HotNews
SAP security note 1167258, "Security note: Program RS_REPAIR_SOURCE", is a program error note released on 08.10.2009. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
The program RS_REPAIR_SOURCE does not have an authorization check.
Solution
A developer authorization check and a check for the changeability of the system were included in the program. Import the Support Package or implement the attached correction instructions.
The corrections do not influence the normal functioning of the application. We strongly recommend that you implement this note to eliminate this security flaw.
Reason and prerequisites
You can use the program RS_REPAIR_SOURCE as an alternative, restricted editor for ABAP programs.
References
This note refers to
Affected components
- SAP_BASIS 700: From 700 To 700
- SAP_BASIS 710: From 710 To 710
Full note on SAP: SAP Support Launchpad note 1167258
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
