Skip links
RedRays - Your SAP Security Solution
Picture of Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

SAP Security on Udemy

Privilege Escalation in ABAP Source Code Editor, SAP security note 1853161

SAP Note 1853161
SAP Security Note
High priority

SAP security note 1853161, “Privilege Escalation in ABAP Source Code Editor”, is a program error note released on 11.06.2013. Below are the symptom and SAP recommended solution.

ComponentBasis Components > ABAP Workbench, Java IDE and Infrastructure > Workbench Tools: Editors, Painter, Modeler > Function Builder
CategoryProgram error
PriorityCorrection with high priority
TypeSAP Security Note
Version2
StatusReleased for Customer
Released on11.06.2013
LanguageEnglish

Description

Symptom

An authenticated user can use functions of the ABAP Workbench to which access should be restricted. This may result in an escalation of privileges.

Solution

Please apply the support package mentioned in this note or follow the respective correction instructions. As a result, the developer license key will be requested.

Reason and prerequisites

ABAP Workbench does not request a developer license key within some of its source code editors.

CVSS

Score 3.6 Vector: AV:N/AC:H/AU:S/C:N/I:P/A:P

Full note on SAP: SAP Support Launchpad note 1853161

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

#Function Builder #ABAP Workbench #Privilege Escalation #License key

Explore More