Medium priority
SAP security note 1604162, "Update #1 for security note 1532042", is a note released on July 13, 2011. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
The correction instructions provided in Security Note 1532042 are outdated, specifically affecting ST-PI number 1284432.
Solution
To resolve the issue, import the relevant Support Package or implement the updated correction instructions provided in this security note.
Reason and prerequisites
The existing correction instructions in Security Note 1532042 are no longer up to date, necessitating this update to ensure proper authorization checks are in place.
References
- Original Security Note 1532042 – Missing authorization check in SAP Solution Manager
Affected components
- Service > SAP Solution Manager > Solution Manager System Landscape (SV-SMG-SYS)
- ST-PI 2008_1_46C and above
- ST-PI 2008_1_620 and above
- ST-PI 2008_1_640 and above
- ST-PI 2008_1_700 and above
- ST-PI 2008_1_710 and above
Full note on SAP: SAP Support Launchpad note 1604162
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].