Skip links
RedRays - Your SAP Security Solution
Picture of Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

SAP Security on Udemy

MASS Subroutines no longer maintained in production systems, SAP security note 1495539

SAP Note 1495539
SAP Security Note
Medium priority

SAP security note 1495539, “MASS: Subroutines no longer maintained in production systems”, is a program error note released on 14.12.2010. Below are the symptom, SAP recommended solution and affected software components.

ComponentCross-Application Components > General Application Functions > Cross-application Mass Change
CategoryProgram error
PriorityMedium priority
TypeSAP Security Note
Version2
StatusReleased for Customer
Released on14.12.2010
LanguageEnglish

Description

Symptom

You can write subroutines for mass maintenance in production systems as well.

Solution

Implement the attached correction instructions.

If field values are set using subroutines, a variant should be created in the development system and transported.

Reason and prerequisites

There is a source code error.

References

This note refers to

  • 304394: Security gap in mass maintenance
  • 151048: Wrong Message Class in Mass Maintenance
  • 323290: Form routine names too long
  • 445892: Security gap in mass maintenance
  • 569864: Display of incorrect source code

Referenced by

  • 1651031: MASS: Subroutines no longer maintained in product systems II
  • 1667880: MASS: 1495539 prevents formula mass maintenance in CJ20N

Affected components

  • SAP_APPL: 45B, 46B, 46C
  • SAP_ABA: 620, 640, 700-702, 710-711, 730

Full note on SAP: SAP Support Launchpad note 1495539

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

#MASS#MM17#XD99#XK99

Explore More