Hard-coded credentials in ALV, SAP security note 1484917

SAP Note 1484917
Medium priority

SAP security note 1484917, “Hard-coded credentials in ALV”, is a program error note released on December 14, 2010. Below are the symptom, SAP recommended solution and the affected software components.

ComponentBC-SRV-ALV

CategoryProgram error

PriorityCorrection with medium priority

StatusReleased for Customer

Released onDecember 14, 2010

LanguageEnglish

Description

Symptom

There are hard-coded credentials in system programs.

Solution

Implement the source code corrections with this note.

Reason and prerequisites

The program code contains a hard-coded username. If a user is successfully authenticated in the system using this name, they may obtain additional information that should not be displayed.

Affected components

SAP_BASIS 620 to 640
SAP_BASIS 700 to 702
SAP_BASIS 710 to 730

Full note on SAP: SAP Support Launchpad note 1484917

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

#Backdoor #hard-coded #credentials #ALV #SAP List Viewer