SAP security note 1449574, "Function module for reading batch input files", is a program error note released on 01.09.2010. Below are the symptom and SAP recommended solution.
Description
Symptom
A function module delivered in the standard SAP system allows any file to be read from any server, even though the user may not have the relevant authorization. The function module is intended only for reading batch input files in the area of bills of material and document management.
Solution
This function module has been limited in its use and can be used only by the corresponding batch inputs. Implement the corrections.
Reason and prerequisites
This problem is caused by a program error.
Full note on SAP: SAP Support Launchpad note 1449574
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].