Skip links
RedRays - Your SAP Security Solution
Picture of Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

SAP Security on Udemy

Dynamic Report Generation, Arbitrary Value Processing, SAP security note 1407841

SAP Note 1407841SAP Security NoteHigh priority

SAP security note 1407841, "Dynamic Report Generation, Arbitrary Value Processing", is a note released on 09.02.2010. Below are the symptom and SAP recommended solution.

ComponentCustomer Relationship Management > Marketing > Marketing Planner > Customer Defaults (CRM-MKT-MPL-DEF)
PriorityCorrection with high priority
StatusReleased for Customer
Released on09.02.2010

Description

Symptom

The dynamic generation of a report is done based on an importing parameter value instead of short-term memory content. This can lead to the processing of arbitrary values.

Solution

Please apply the attached correction instructions.

Reason and prerequisites

This correction should be applied to all systems running CRM 7.0.

References

Full note on SAP: SAP Support Launchpad note 1407841

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

#Code Execution#Customer Defaults#CRM-MKT-MPL-DEF

Explore More