Update 1 to Security Note 1965819, SAP security note 2111541

SAP security note 2111541, "Update 1 to Security Note 1965819", is a program error note released on 26.02.2015. Below are the symptom and SAP recommended solution.

Description

Symptom

This SAP Note extends the validity of correction instructions in security note 1965819. Correction instructions have been added for the following releases: 7.0, 7.01, 7.02 in lower support packages.

Solution

Apply the note only if you cannot apply note 1965819 and you cannot upgrade to a higher support package level. In general, we urge you to import the latest Support Package into your system:

• SAP Business Warehouse (SAP BW) 7.0: import Support Package 34 for SAP BW 7.00 (SAPKW70034) into your BW system. The Support Package will be available as soon as SAP Note 1930843 with the short text "SAPBWNews NW BW 7.0 ABAP SP34" is released for customers.
• SAP BW 7.01 (SAP BW 7.0 EHP 1): import Support Package 17 for SAP BW 7.01 (SAPKW70117) into your BW system. The Support Package will be available as soon as SAP Note 2013377 with the short text "SAPBINews NW7.01 BW ABAP SP17" is released for customers.
• SAP BW 7.02 (SAP BW 7.0 EHP 2): import Support Package 17 for SAP BW 7.02 (SAPKW70217) into your BW system. The Support Package will be available as soon as SAP Note 2017437 with the short text "Preliminary Version SAPBWNews NW BW 7.02 ABAP SP17" is released for customers.

Reason and prerequisites

The correction instructions in security note 1965819 for 7.0, 7.01, and 7.02 were accidentally delivered with a very small validity range. The security note change process at SAP requires a new note to extend this validity. If you can apply security note 1965819, nothing needs to be done, and this note does not need to be applied. If you cannot apply note 1965819 in older support packages, please use this note to apply the corrections.

CVSS

Score 6.0 Vector: AV:N/AC:M/Au:S/C:P/I:P/A:P

References

• 1965819 – Potential modification / disclosure of persisted data in BW-WHM-DBA