SAP security note 1772208, "Hard-coded credentials in BC-SRV-BAL", is a program error note released on January 8, 2013. Below are the symptom and SAP recommended solution.
Description
Symptom
BC-SRV-BAL contains code that alters the program’s behavior when a user is successfully authenticated with a specific user name. This hard-coded credential could allow an attacker to gain unauthorized access or access additional sensitive information that should not be displayed.
Solution
Implement the correction instructions provided in the SAP Note or import the relevant Support Package to address this vulnerability.
CVSS
Score 6.0 Vector: AV:N/AC:M/AU:S/C:P/I:P/A:P
Full note on SAP: SAP Support Launchpad note 1772208
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].