SAP Note 1572613
SAP security note 1572613, "Update #1 to Security Note 1493809", released on 10.05.2011. Below are the symptom and SAP recommended solution.
Description
Symptom
Additional correction instructions for the following releases are provided for the vulnerability (code injection) addressed in Security Note 1493809:
- FINBASIS 300
- FINBASIS 600
- FINBASIS 602
- FINBASIS 603
- FINBASIS 700
Solution
Correction has been made in the corresponding support package. For urgent correction, please apply Note 1493809 and then apply the attached correction instructions in this note.
Reason and prerequisites
Security Note 1493809 misses correction instructions.
References
Full note on SAP: SAP Support Launchpad note 1572613
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].