SAP Note 1484917
Medium priority
Medium priority
SAP security note 1484917, “Hard-coded credentials in ALV”, is a program error note released on December 14, 2010. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
There are hard-coded credentials in system programs.
Solution
Implement the source code corrections with this note.
Reason and prerequisites
The program code contains a hard-coded username. If a user is successfully authenticated in the system using this name, they may obtain additional information that should not be displayed.
Affected components
- SAP_BASIS 620 to 640
- SAP_BASIS 700 to 702
- SAP_BASIS 710 to 730
Full note on SAP: SAP Support Launchpad note 1484917
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].