SAP Security Note
Low priority
SAP security note 2292487, "Hard Coded System IDs in Code Page Conversion Tool (BC-I18)", is a program error note released on May 10, 2016. Below are the symptom and SAP recommended solution.
Description
Symptom
Some functionality in the test environment of the Code Page Conversion Tool contains code with hard-coded system IDs. This can lead to the exposure of resources in the test environment to unintended users.
Solution
Apply the Support Package mentioned in this SAP Note or follow the correction instructions.
Reason and prerequisites
Some programs of the Code Page Conversion functionality of BC-I18 use hard-coded system IDs, which may result in unexpected behavior in systems with the same system ID. A user with special authorization to use conversion tools is required.
CVSS
Score 3.1 Vector: AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:L
Full note on SAP: SAP Support Launchpad note 2292487
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].