SAP Security Note
Medium priority
SAP security note 2921615, “BI Platform stores SAP BW Authentication Password as clear text”, is a program error note released on 11.08.2020. Below are the symptom and SAP recommended solution.
Description
Symptom
SAP ENTITLEMENT SYSTEMS contains the password in clear text.
Solution
This issue is fixed in the patches listed in the “Support Packages & Patches” section below.
The “Support Packages & Patches” section will be populated with the relevant patch levels once they are released.
For Business Intelligence Platform maintenance schedule and strategy see the Knowledge Base Article 2144559 in the References section.
Please update SAP BW password after the patch update.
References
CVSS
Score 5.5 Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
Full note on SAP: SAP Support Launchpad note 2921615
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].



