SAP Security Note
High priority
SAP security note 1601038, “Macro containing a comparison with the session username”, is a program error note released on 08.11.2011. Below are the symptom and SAP recommended solution.
Description
Symptom
A comparison with the session username is problematic for security reasons.
Solution
Component: CRM-LOY
Apply the attached correction instructions.
Reason and prerequisites
Program error
References
Full note on SAP: SAP Support Launchpad note 1601038
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
