Skip links
RedRays - Your SAP Security Solution
Picture of Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

SAP Security on Udemy

Hard-coded credentials in Cash Management, SAP security note 1602393

SAP Note 1602393
SAP Security Note
High priority

SAP security note 1602393, "Hard-coded credentials in Cash Management", is a note released on 11.10.2011. Below are the symptom and SAP recommended solution.

ComponentFinancial Supply Chain Management > Cash Management (FIN-FSCM-CM)
PriorityCorrection with high priority
TypeSAP Security Note
StatusReleased for Customer
Released on11.10.2011

Description

Symptom

Cash Management contains code that changes the program’s behaviour when a user is successfully authenticated with a certain username.

Solution

Import the Support Package SAPKH47037 specified in this note or implement the attached correction instructions.

Reason and prerequisites

The program code contains a hard-coded username that changes the system’s behaviour if a user is successfully authenticated. The user may obtain additional information that should not be displayed.

References

Full note on SAP: SAP Support Launchpad note 1602393

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

#Backdoor #Hard-coded #Credentials #Cash Management

Explore More