Skip links
Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

Lockout bypass through function module RFC_SYSTEM_INFO, SAP security note 604816

Description

The function module RFC_SYSTEM_INFO returns information as to whether the used logon data was correct.

Available fix and Supported packages

  • SAP_APPL | 31I | 31I
  • SAP_APPL | 40A | 40B
  • SAP_APPL | 45A | 45B

Affected component

    BC-MID-RFC
    RFC

CVSS

Score: 0

PoC

Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.

URL

https://launchpad.support.sap.com/#/notes/604816

TAGS

#VulnerabilitiesInternet-Security-Systems-“sap-sapinfo-lockout-bypass”Security-Focus-Online-“SAP-R/3-sapinfo-RFC-API-Account-Locking-Weakness””SAP-R/3
#account-locking-and-RFC-SDK”

More to explorer

Special offer for SAP Security Udemy course!

$ 9.99

Join “SAP Security Core Concepts and Security Administration” which is part of the Blackhat course series.