SAP security note 1474853, "BCE: Secure Business Content Environment", is a program error note released on August 10, 2010. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
You are using Business Content Environment in a Business ByDesign System to configure your business settings (Business Content Environment is part of Business Configuration Design Time). This framework could pose a security risk and should be secured appropriately.
Solution
Implement this note to secure the coding used by Business Content Environment.
Reason and prerequisites
Several ABAP-based functions used by Business Content Environment could be exploited maliciously.
References
This note refers to
Affected components
- SAP_BASIS 710 to 720
- SAP_BASIS 72L
Full note on SAP: SAP Support Launchpad note 1474853
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
