SAP Note 1495594
SAP Security Note
High priority
SAP Security Note
High priority
SAP security note 1495594, "Basic data: Adjusting number ranges", is a program error note released on October 12, 2010. Below are the symptom and SAP recommended solution.
Description
Symptom
In the check report and the adjustment report for number ranges to number range objects of the flexible Real Estate Management, the relevant authorization check for changing the number range levels for intervals with internal assignments is missing.
Solution
- Implement the attached corrections in the relevant source code.
- Proceed as described in the manual postprocessing steps.
- Save and activate your changes.
Reason and prerequisites
This is caused by a program error. You use Flexible Real Estate Management as of Release 500.
References
- SAP Note 1515265: Composite SAP note: Security of Real Estate Mgmt (RE/RE-FX)
Full note on SAP: SAP Support Launchpad note 1495594
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].