Description
This SAP note describes new authorization checks for the following RFC function modules in CRM Portal Content.
CRM_SERVICE_CONTRACTS_SEARCH
CRM_SERVICE_PROCESSES_SEARCH
CRM_SERVICE_SEARCH_LIST
CRM_SERVICE_COMPLAINTS_SEARCH
CRM_SERV_COMPLAINT_SEARCH_LDB
CRM_SERVICE_CONFIRMATION_SERCH
CRM_SEARCH_OPPORTUNITY
CRM_SEARCH_FAVO_SALESDOCS
Available fix and Supported packages
- BBPCRM | 700 | 700
- BBPCRM | 701 | 701
- BBPCRM | 702 | 702
- BBPCRM | 712 | 712
- BBPCRM | 713 | 713
- BBPCRM | 714 | 714
- BBPCRM 700 | SAPKU70018 |
- BBPCRM 701 | SAPKU70115 |
- BBPCRM 712 | SAPKU71210 |
- BBPCRM 702 | SAPKU70217 |
- BBPCRM 714 | SAPK-71402INBBPCRM |
- BBPCRM 713 | SAPKU71312 |
Affected component
- CRM-BF
Basic Functions
CVSS
Score: 0
PoC
Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.
URL
https://launchpad.support.sap.com/#/notes/2257328