SAP security note 1355614, "IS-M/ PMD: Obsolete source code in master data generator", released on September 9, 2010. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
If you use the IS-M master data generator via transaction JPMDG2, this note addresses the removal of obsolete source code segments containing ABAP elements that require development authorization. Previously, users without development authorization could insert source code into the system. After implementing this note, unintentionally inserting source code is no longer possible.
Solution
Implement the relevant correction instructions for your release. You can find the correction instructions here.
Reason and prerequisites
The issue is due to a program error.
References
Affected components
- IS-M versions 402, 464, 471, 472, 600, 602, 603, 604
Full note on SAP: SAP Support Launchpad note 1355614
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
