SAP Security Note
High priority
SAP security note 1984057, "Update #1 to Security Note 1635004", is a program error note released on 13.05.2014. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
This SAP Note 1984057 supplements the correction instructions provided in the security note 1635004. New correction instructions have been added for the following releases:
- SAP_BASIS 620
- SAP_BASIS 640
- SAP_BASIS 700
- SAP_BASIS 701
- SAP_BASIS 702
- SAP_BASIS 710
- SAP_BASIS 711
- SAP_BASIS 720
- SAP_BASIS 730
- SAP_BASIS 731
- SAP_BASIS 740
Solution
Please implement the corrections provided for the directory traversal issue fixed via SAP Security Note 1635004 (which must be implemented first) and then implement the additional corrections provided via SAP Security Note 1984057 (which must be implemented after 1635004).
Reason and prerequisites
The correction instructions provided in the security note 1635004 must be supplemented.
References
This note refers to
Affected components
- SAP_BASIS 620 to 640
- SAP_BASIS 700 to 702
- SAP_BASIS 710 to 740
Full note on SAP: SAP Support Launchpad note 1984057
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
