Hard-coded user name in Retail industry solution for India, SAP security note 1592669

SAP security note 1592669, "Hard-coded user name in Retail industry solution for India", is a program error note released on July 12, 2011. Below are the symptom, SAP recommended solution and the affected software components.

Description

Symptom

Retail industry solution for India contains code that changes the program’s behavior when a user is successfully authenticated with a certain username.

Solution

Apply the code corrections provided in the note or upgrade to the relevant Support Package level of the note.

Reason and prerequisites

The program code includes a hard-coded username that alters the system’s behavior upon successful user authentication. This allows the user to obtain additional information that should not be displayed.

References

• Automatic checks for security notes using RSECNOTE (outdated)

Affected components

• EA-RETAIL