Skip links
Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

Authorization checks for RFC in E-Recruiting, SAP security note 2059230

Description

New authorization checks for RFC function modules in E-Recruiting.

Available fix and Supported packages

  • ERECRUIT | 600 | 600
  • ERECRUIT | 603 | 603
  • ERECRUIT | 604 | 604
  • ERECRUIT | 605 | 605
  • ERECRUIT | 606 | 606
  • ERECRUIT | 616 | 616
  • ERECRUIT | 617 | 617
  • ERECRUIT | 800 | 800
  • ERECRUIT | 801 | 801
  • ERECRUIT | 802 | 802
  • ERECRUIT 600 | SAPK-60027INERECRUIT |
  • ERECRUIT 603 | SAPK-60316INERECRUIT |
  • ERECRUIT 604 | SAPK-60417INERECRUIT |
  • ERECRUIT 605 | SAPK-60514INERECRUIT |
  • ERECRUIT 606 | SAPK-60614INERECRUIT |
  • ERECRUIT 616 | SAPK-61609INERECRUIT |
  • ERECRUIT 617 | SAPK-61707INERECRUIT |
  • ERECRUIT 800 | 800 |
  • ERECRUIT 801 | 801 |
  • ERECRUIT 802 | 802 |

Affected component

    PA-ER
    E-Recruiting

CVSS

Score: 0

PoC

Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.

URL

https://launchpad.support.sap.com/#/notes/2059230

TAGS

#RFC
#authorization.

Explore More

Special offer for SAP Security Udemy course!

$ 9.99

Join “SAP Security Core Concepts and Security Administration” which is part of the Blackhat course series.