Hard-coded credentials in BC-SRV-KPR-DMF, SAP security note 1578393

SAP security note 1578393, "Hard-coded credentials in BC-SRV-KPR-DMF", is a program error note released on September 13, 2011. Below are the symptom, SAP recommended solution and the affected software components.

Description

Symptom

BC-SRV-KPR-DMF contains code which changes the program’s behaviour when a user successfully authenticates with a certain username.

Solution

Please implement the corrections in the note or import the relevant support package.

Reason and prerequisites

The program code contains a hard-coded username which changes the system’s behaviour should a user authenticate successfully. The user may obtain additional information which should not be displayed.

References

• SAP Note 888889 – Automatic checks for security notes using RSECNOTE (outdated)

Affected components

• SAP_BASIS from version 620 to 640
• SAP_BASIS from version 700 to 702
• SAP_BASIS from version 710 to 730