Skip links
Picture of Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

BI Platform stores SAP BW Authentication Password as clear text, SAP security note 2921615

SAP Note 2921615
SAP Security Note
Medium priority

SAP security note 2921615, “BI Platform stores SAP BW Authentication Password as clear text”, is a program error note released on 11.08.2020. Below are the symptom and SAP recommended solution.

ComponentBusiness intelligence solutions > Business intelligence platform > CMS / Auditing issues (excl. 3rd Party Authentication)
CategoryProgram error
PriorityCorrection with medium priority
TypeSAP Security Note
Version1
StatusReleased for Customer
Released on11.08.2020
LanguageEnglish

Description

Symptom

SAP ENTITLEMENT SYSTEMS contains the password in clear text.

Solution

This issue is fixed in the patches listed in the “Support Packages & Patches” section below.

The “Support Packages & Patches” section will be populated with the relevant patch levels once they are released.

For Business Intelligence Platform maintenance schedule and strategy see the Knowledge Base Article 2144559 in the References section.

Please update SAP BW password after the patch update.

References

CVSS

Score 5.5 Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N

Full note on SAP: SAP Support Launchpad note 2921615

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

Explore More