Skip links
Picture of Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

Logging of Customizing changes in FS-RI missing, SAP security note 1569850

SAP Note 1569850
SAP Security Note
Medium priority

SAP security note 1569850, “Logging of Customizing changes in FS-RI missing”, released on March 13, 2012. Below are the symptom and SAP recommended solution.

ComponentFinancial Services > Re-Insurance (FS-RI)
PriorityCorrection with medium priority
TypeSAP Security Note
Version3
StatusReleased for Customer
Released onMarch 13, 2012
LanguageEnglish

Description

Symptom

A user can make changes to the configuration of FS-RI without the changes being logged.

Solution

The logging of data changes is fully activated in FS-RI.

Reason and prerequisites

Since the logging of data changes in FS-RI is not fully activated, changes can be made to the configuration that can no longer be retraced.

Full note on SAP: SAP Support Launchpad note 1569850

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

Explore More

Three identical server cabinets carrying stacks of code of very different heights beside a measuring rule

ABAP Code Security Scan Cost Drivers

What moves the cost of an ABAP code security scan: custom object counts, effective lines, systems in scope, transport gating, triage and retest.