SAP security note 1672911, “Hard-coded credentials in BC-SRV-NBC”, is a program error note released on 10.09.2013. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
BC-SRV-NBC (“Netweaver Business Content”) contains code that changes the program’s behavior when a user is successfully authenticated with a certain user name. An attacker can be authenticated there without having their own legitimate credentials, or they may escalate privileges.
Solution
Implement this note.
Reason and prerequisites
The program code contains a hard-coded user name that changes the system’s behavior if a user is successfully authenticated. The user may obtain additional information that should not be displayed.
The vulnerability is caused by a hard-coded user name and password combination in the program’s source code. An attacker who specifies these credentials can log on to the system without having been assigned legitimate access by the system administrator(s).
If a user already has privileges with which they can log on, an escalation of privileges may be possible if the hard-coded account has higher access rights than the original user.
CVSS
Score 0
Affected components
- SAP_BASIS 700 to 702
- SAP_BASIS 710 to 730
- SAP_BASIS 731
Full note on SAP: SAP Support Launchpad note 1672911
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].