SAP Security Note
Medium priority
SAP security note 1569850, “Logging of Customizing changes in FS-RI missing”, released on March 13, 2012. Below are the symptom and SAP recommended solution.
Description
Symptom
A user can make changes to the configuration of FS-RI without the changes being logged.
Solution
The logging of data changes is fully activated in FS-RI.
Reason and prerequisites
Since the logging of data changes in FS-RI is not fully activated, changes can be made to the configuration that can no longer be retraced.
Full note on SAP: SAP Support Launchpad note 1569850
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].




