SAP Note 1808402
High priority
High priority
SAP security note 1808402, “Missing Authorization Check in BC-SRV-BRF”, is a program error note released on March 12, 2013. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
An authenticated user can utilize functions of BC-SRV-BRF without proper authorization checks, potentially leading to an escalation of privileges.
Solution
Implement the provided correction instructions or import the specified Support Packages. Detailed instructions can be found in the Support Package page.
CVSS
Score 4.6 Vector: NHS/PPP
Affected components
- SAP_BASIS: Versions 7.10 to 7.30, 7.31, 7.40
- SAP_ABA: Versions 6.40 and 7.00 to 7.02
Full note on SAP: SAP Support Launchpad note 1808402
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
