SAP Note 2218598Medium priority
SAP security note 2218598, "Additional authorization checks in facilities component", released on July 11, 2017. Below is the symptom.
Description
Symptom
This SAP Security Note introduces new switchable authorization checks for RFC function modules in Facility Management. By default, remote calls to RFC function modules are protected by checks on the authorization object S_RFC. However, to enhance security, this note activates additional authorization checks to ensure secure execution for specific RFC function modules within the Facilities component.
References
- 2253930 – SACF | Error in scenario status check
- 1922808 – SACF | FAQ | Supplementary information about the application
Full note on SAP: SAP Support Launchpad note 2218598
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].