SAP Security Note
High priority
SAP security note 1562697, “Authorization group for trust relationship”, is a program error note released on 17.08.2015. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
This security note has been updated. For more detailed information, see security note 2205521.
Due to insufficient authorization checks, a read access to the RFC table RFCSYSACL may be granted.
Solution
Import the attached Support Package or follow the manual instructions below.
Reason and prerequisites
The table RFCSYSACL was not assigned to an authorization group that is dedicated.
Affected components
- SAP_BASIS 620 to 640
- SAP_BASIS 700 to 702
- SAP_BASIS 710 to 730
Full note on SAP: SAP Support Launchpad note 1562697
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
