Update 2 to Security Note 1971238, SAP security note 2284952

SAP security note 2284952, "Update 2 to Security Note 1971238", is a program error note released on 12.04.2016. Below are the symptom, SAP recommended solution and the affected software components.

Description

Symptom

This SAP Note supplements the corrections provided in security note 1971238.

Solution

Please implement the note by following the correction instructions.

Reason and prerequisites

BC-CUS-TOL-HMT does not contain authorization checks for verifying an authenticated user’s authorization to access certain functions. This omission may result in undesired system behavior.

Prerequisites:

• Note 1971238
• Note 2017050

This note resolves the side effects caused by 2017050 – Update 1 to Security Note 1971238.

CVSS

Score 6.3 Vector: AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

References

Affected components

• SAP_BASIS (700 to 702, 710 to 711, 730, 731, 740, 750)