SAP security note 1911523, "Hard-coded credentials in Backend Printing". Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
Backend Printing contains code that changes the program’s behavior when a user is successfully authenticated with a certain user name.
Solution
The statements with the hard-coded user are removed. Please apply the support package mentioned in this note or the respective correction instruction.
Reason and prerequisites
The program code contains a hard-coded user name that changes the system’s behavior if a user is successfully authenticated.
CVSS
Score 3.6 Vector: AV:N/AC:H/AU:S/C:P/I:N/A:P
Full note on SAP: SAP Support Launchpad note 1911523
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].