Skip links
Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

IS-M/ PMD Obsolete source code in master data generator, SAP security note 1355614

Description

This note is important for you if you use the IS-M master data generator through transaction JPMDG2. Obsolete source code segments were removed. These contain ABAP language elements that require development authorization. Up to now, a person who did not have development authorization could insert source code in the system. After you implement this note, unintentionally inserting source code is no longer possible.

Available fix and Supported packages

  • IS-M | 402 | 402
  • IS-M | 464 | 464
  • IS-M | 471 | 471
  • IS-M | 472 | 472
  • IS-M | 600 | 600
  • IS-M | 602 | 602
  • IS-M | 603 | 603
  • IS-M | 604 | 604
  • IS-M 471 | SAPKIPPM23 |
  • IS-M 472 | SAPKIPPN17 |
  • IS-M 600 | SAPK-60016INISM |
  • IS-M 602 | SAPK-60206INISM |
  • IS-M 603 | SAPK-60305INISM |
  • IS-M 604 | SAPK-60404INISM |
  • IS-M 464 | SAPKIPPL31 |

Affected component

    IS-M-MD-PR-MP
    Media Product

CVSS

Score: 0

PoC

Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.

URL

https://launchpad.support.sap.com/#/notes/1355614

TAGS

#ISMPMD
#JPMDG2

More to explorer

Special offer for SAP Security Udemy course!

$ 9.99

Join “SAP Security Core Concepts and Security Administration” which is part of the Blackhat course series.