SAP security note 1791081, "Hard-coded credentials in PS-ST and PS-MAT-PRO", is a note released on 11.02.2014. Below are the symptom, SAP recommended solution and affected software components.
Description
Symptom
PS-MAT-PRO and PS-ST contain code that alters the program’s behavior when a user is successfully authenticated with a specific username. This vulnerability allows the user to obtain additional information that should not be displayed.
Solution
Implement the corrections provided in this security note to resolve the issue.
CVSS
Score 6.0 Vector: AV:N/AC:M/AU:S/C:P/I:P/A:P
Affected components
- EA-APPL: 110, 200, 500, 600, 602, 603, 604, 605, 606, 616
Full note on SAP: SAP Support Launchpad note 1791081
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].