SAP Security Note
High priority
SAP security note 1774903, “Hard-coded logon information in taskhandler”, is a program error note released on December 11, 2012. Below are the symptom and SAP recommended solution.
Description
Symptom
An attacker can be authenticated to taskhandler functions without having their own legitimate credentials, or they may escalate privileges.
Solution
Import at least the Support Package specified in this SAP Note or implement the relevant correction instructions.
Reason and prerequisites
The vulnerability is caused by a hard-coded username and password combination in the program’s source code. An attacker specifying these credentials can log onto the system without legitimate access assigned by the system administrator(s). If a user already has privileges to log on, an escalation of privileges may be possible if the hard-coded account has higher access rights than the original user.
CVSS
Score 6.0 Vector: AV:N/AC:M/AU:S/C:P/I:P/A:P
References
This note refers to
Full note on SAP: SAP Support Launchpad note 1774903
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].