Skip links
RedRays - Your SAP Security Solution
Picture of Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

SAP Security on Udemy

Missing authority check in BOP, SAP security note 1425123

SAP Note 1425123
SAP Security Note
Medium priority

SAP security note 1425123, "Missing authority check in BOP", is a program error note released on 19.12.2013. Below are the symptom, SAP recommended solution and the affected software components.

ComponentSCM-APO-ATP (Supply Chain Management > Advanced Planning and Optimization > Global Available-to-Promise)
CategoryProgram error
PriorityCorrection with medium priority
TypeSAP Security Note
Version3
StatusReleased for Customer
Released on19.12.2013
LanguageEnglish

Description

Symptom

Missing authority check allows the user of the program to access (Insert, Update, Modify, Delete) any tables and also on any fields of those tables.

This security note has been updated. For more detailed information, see Security Note 1956812.

Solution

Implement the attached correction instruction or upgrade to the corresponding support package.

Reason and prerequisites

The problem is caused by a program error.

References

Affected components

  • SCM 500 to 500
  • SCM 510 to 510
  • SCM 700 to 700

Full note on SAP: SAP Support Launchpad note 1425123

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

#Security update #generic table access

Explore More