RedRays Team 11 years ago Information disclosure due to missing auth. in EWA functions, SAP security note 1688229