Skip links
RedRays - Your SAP Security Solution
Picture of Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

SAP Security on Udemy

Missing authorization check in PP-SFC-EXE, SAP security note 1907712

SAP Note 1907712

SAP security note 1907712, "Missing authorization check in PP-SFC-EXE". Below are the symptom and SAP recommended solution.

Description

Symptom

An authenticated user can use functions of PP-SFC-EXE to which access should be restricted. This may result in an escalation of privileges.

Solution

The error is corrected with the implementation of this SAP Note.

Reason and prerequisites

Before implementing this correction, you must have fully implemented SAP Note 1882417.

CVSS

Score 6.0 Vector: AV:N/AC:M/AU:S/C:P/I:P/A:P

References

Full note on SAP: SAP Support Launchpad note 1907712

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

#PP-SFC-EXE #Authorization Check #Privilege Escalation #Production Planning

Explore More