Skip links
RedRays - Your SAP Security Solution
Picture of Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

SAP Security on Udemy

Hardcoded credentials in BC-SRV-DX-DXW, SAP security note 2057982

SAP Note 2057982

SAP security note 2057982, "Hardcoded credentials in BC-SRV-DX-DXW". Below are the symptom, SAP recommended solution and the affected software components.

Description

Symptom

BC-SRV-DX-DXW contains code that alters the program's behavior when a user is successfully authenticated with a specific username. This vulnerability allows an attacker to authenticate to BC-SRV-DX-DXW without legitimate credentials or escalate privileges.

Solution

Please implement the SAP Note 2057982 to address this security issue.

CVSS

Score 2.1 / 10 Vector: AV:N/AC:H/Au:S/C:P/I:N/A:N

Affected components

  • SAP_ABA (700 to 740)

Full note on SAP: SAP Support Launchpad note 2057982

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

#Hardcoded credentials#BC-SRV-DX-DXW#SAP_ABA#Privilege escalation

Explore More