SAP Security Note
High priority
SAP security note 1515926, “Update #1 to Security Note 1414256”, is a program error note released on 29.02.2012. Below are the symptom and SAP recommended solution.
Description
Symptom
SNC and domain links for changing the TMSADM password are supported as of this note. This functionality is still restricted to Release 4.6C or higher.
Solution
Implement the attached correction instructions or the relevant Support Package in all systems of the domain or connected domains. Additionally, start the report described in Note 1414256 on the domain controller or on all domain controllers of the connected domains.
Reason and prerequisites
There are specific security requirements that necessitate this update.
References
- 761637: Logon restrictions prevent TMSADM logon
- 1801805: Introduction of new destinations and patches in TMS_UPDATE_PWD_OF_TMSADM
- 1504652
- 1494899: CHANGE_SUPPLIED_PARAMS_ONLY indicator
- 1488406: Handling the generated user TMSADM
- 1486759: Blocking unauthorized access to system using TMSADM to 4.6B
- 1414256: Changing TMSADM password is too complex
- 1412609: DUPREC when configuring the transport domain
- 1023437: ABAP syst: Downwardly incompatible passwords (since NW2004s)
Full note on SAP: SAP Support Launchpad note 1515926
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
