SAP Note 1499901SAP Security NoteMedium priority
SAP security note 1499901, "Executing arbitrary code with RSNROGEN", is a program error note released on May 10, 2011. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
RSNROGEN contains code which allows a malicious user to execute arbitrary program code of the user's choice.
Solution
Report RSNROGEN is deleted as no longer to be used.
Reason and prerequisites
The program code contains a possibility to define and execute code of the user's choice which changes the system's behavior. A valid and authenticated user is not required.
References
This note refers to
Affected components
- SAP_BASIS 620 to 640
- SAP_BASIS 700 to 702
Full note on SAP: SAP Support Launchpad note 1499901
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].