Skip links
RedRays - Your SAP Security Solution
Picture of Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

SAP Security on Udemy

Missing authorization check in Treasury, SAP security note 1558340

SAP Note 1558340SAP Security NoteHotNews

SAP security note 1558340, "Missing authorization check in Treasury", is a program error note released on 10.05.2011. Below are the symptom, SAP recommended solution and the affected software components.

ComponentFinancials > Financial Supply Chain Management > Treasury and Risk Management > Transaction Manager > Transaction Management
CategoryProgram error
PriorityHotNews
TypeSAP Security Note
Version2
StatusReleased for Customer
Released on10.05.2011
LanguageEnglish

Description

Symptom

An authenticated user can use functions of Treasury to which access should be restricted. This may result in an escalation of privileges.

Solution

Implement the correction instructions or import the corresponding Support Package.

Reason and prerequisites

Treasury does not contain authorization checks for checking an authenticated user's authorization to access some of its functions. This may result in undesired system behaviour.

Affected components

  • EA-FINSERV 110, 200, 500, 600, 603, 604, 605
  • BANK/CFM 463_20

Full note on SAP: SAP Support Launchpad note 1558340

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

#Authorization #Authorization Check #Master Data

Explore More