Hard-coded logon information in CL_CRM_ISU_ORDE…, SAP security note 1484743

SAP security note 1484743, "Hard-coded Logon Information in CL_CRM_ISU_ORDE…", was released on August 10, 2010. Below are the symptom and SAP recommended solution.

Description

Symptom

The presence of a hard-coded user name in the program code can result in altered system responses if a user authenticates using this name, potentially leading to unauthorized information disclosure.

Solution

Implement the provided corrections as outlined in the SAP Security Note to eliminate hard-coded logon information and secure the authentication process.

Reason and prerequisites

Hard-coded credentials within the program increase the risk of security breaches by allowing unintended access to system functionalities.

References

• Automatic checks for security notes using RSECNOTE (outdated)