RedRays Team 10 years ago Information disclosure due to missing auth. in EWA functions, SAP security note 1688229