Skip links
RedRays - Your SAP Security Solution
Picture of Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

SAP Security on Udemy

Hard-coded credentials in the Switch Framework, SAP security note 1515471

SAP Note 1515471
SAP Security Note
High priority

SAP security note 1515471, "Hard-coded credentials in the Switch Framework", is a program error note released on 14.12.2010. Below are the symptom and the SAP recommended solution.

ComponentBasis Components > ABAP Workbench, Java IDE and Infrastructure > Workbench Tools: Editors, Painter, Modeler > Switch Framework Tools
CategoryProgram error
PriorityCorrection with high priority
TypeSAP Security Note
Version4
StatusReleased for Customer
Released on14.12.2010
LanguageEnglish

Description

Symptom

The system contains code which changes the program’s behavior when a user successfully authenticates with a certain user name.

Solution

Implement the attached correction instructions or import the relevant Support Package.

Reason and prerequisites

The program code contains a hard-coded username which changes the system’s behavior if a user authenticates successfully. If a user successfully logs on to the system with this name: Switch-dependent information may be stored in the incorrect language. The Eclipse-based ABAP Development Tools quick search may return incorrect results.

Full note on SAP: SAP Support Launchpad note 1515471

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

#Backdoor #hard-coded #credentials #Switch Framework #Repository Information System #Repository Info System

Explore More