Hard-coded credentials in ABAP Workbench, SAP security note 1570717

SAP Note 1570717
SAP Security Note
High priority

SAP security note 1570717, "Hard-coded credentials in ABAP Workbench", is a note released on 10.05.2011. Below are the symptom and SAP recommended solution.

ComponentBasis Components > ABAP Workbench, Java IDE and Infrastructure > Workbench Tools: Editors, Painter, Modeler

PriorityCorrection with high priority

TypeSAP Security Note

Version2

StatusReleased for Customer

Released on10.05.2011

Description

Symptom

ABAP Workbench contains code which changes the program’s behavior when a user successfully authenticates with a certain username.

Solution

Please apply the support package mentioned in this note at least, or follow the respective correction instructions.

Reason and prerequisites

The program code contains a hard-coded username which changes the system’s behavior should a user authenticate successfully. The user may obtain additional information which should not be displayed.

CVSS

Score 0

References

Automatic checks for security notes using RSECNOTE (outdated)

Full note on SAP: SAP Support Launchpad note 1570717

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

#Backdoor #hard-coded credentials #ABAP Workbench #Function code handler