SAP security note 1753036, "Hard-coded credentials in IS-B-DP-EDT", is a note. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
IS-B-DP-EDT contains code that changes the program's behavior when a user is successfully authenticated with a certain user name. Hard-coded user name and password/credentials: An attacker can be authenticated to IS-B-DP-EDT without having their own legitimate credentials, or they may escalate privileges.
Solution
Implement the Note 1753036 or the corresponding Support Package.
Reason and prerequisites
The program code contains a hard-coded user name that changes the system's behavior if a user is successfully authenticated. The user may obtain additional information that should not be displayed. The vulnerability is caused by a hard-coded user name in the program's source code. An attacker who specifies these credentials can log on to the system without having been assigned legitimate access by the system administrator(s). If a user already has privileges with which they can log on, an escalation of privileges may be possible if the hard-coded account has higher access rights than the original user.
Affected components
- SAP_ABA: 620, 640, 700-702, 710-711, 730-731
Full note on SAP: SAP Support Launchpad note 1753036
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].