Hard-coded credentials in IS-U-MD, SAP security note 1633990

SAP security note 1633990, "Hard-coded credentials in IS-U-MD", is a note released on 08.11.2011. Below are the symptom, SAP recommended solution and the affected software components.

Description

Symptom

IS-U-MD contains code that changes the program’s behavior when a user is successfully authenticated with a certain user name.

Solution

Implement the program corrections.

Reason and prerequisites

The program code contains a hard-coded user name that changes the system’s behavior if a user is successfully authenticated. The user may obtain additional information that should not be displayed.

References

• 1624291 – Syntax error when implementing a security note

Affected components

• IS-U/CCS
• IS-UT