Hardcoded credentials in BC-SRV-DX-DXW, SAP security note 2057982

SAP Note 2057982

SAP security note 2057982, "Hardcoded credentials in BC-SRV-DX-DXW". Below are the symptom, SAP recommended solution and the affected software components.

Description

Symptom

BC-SRV-DX-DXW contains code that alters the program's behavior when a user is successfully authenticated with a specific username. This vulnerability allows an attacker to authenticate to BC-SRV-DX-DXW without legitimate credentials or escalate privileges.

Solution

Please implement the SAP Note 2057982 to address this security issue.

CVSS

Score 2.1 / 10 Vector: AV:N/AC:H/Au:S/C:P/I:N/A:N

Affected components

SAP_ABA (700 to 740)

Full note on SAP: SAP Support Launchpad note 2057982

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

#Hardcoded credentials #BC-SRV-DX-DXW #SAP_ABA #Privilege escalation