SAP Security Note
Low priority
SAP security note 1815228, "Certificate Mapping: constraint "min. date" without function", was released on 30.04.2014. Below are the symptom and SAP recommended solution.
Description
Symptom
An administrator has specified the constraint "min. date" for a single certificate mapping (using the detailed view of ABAP transactions EXTID_DN or SM30 for view VUSREXTID and type DN) with the intent to prevent the usage of certificates with an attribute "valid from" prior to the specified constraint date.
The system does not prevent the usage of certificates with an attribute "valid from" prior to the specified constraint date for logon.
Solution
Kernel correction
Reason and prerequisites
Missing constraint check
Full note on SAP: SAP Support Launchpad note 1815228
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].