Skip links
RedRays - Your SAP Security Solution
Picture of Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

SAP Security on Udemy

Missing authorization check in BC-WD-CMP-FPM, SAP security note 1675533

SAP Note 1675533SAP Security NoteHigh priority

SAP security note 1675533, “Missing authorization check in BC-WD-CMP-FPM”, is a program error note released on 08.05.2012. Below are the symptom and SAP recommended solution.

ComponentBC-WD-CMP-FPM (Basis Components > Web Dynpro > Configurable Component > Floorplanmanager)
CategoryProgram error
PriorityHigh priority
TypeSAP Security Note
Version2
StatusReleased for Customer
Released on08.05.2012
LanguageEnglish

Description

Symptom

An authenticated user can use functions of BC-WD-CMP-FPM to which access should be restricted. This may result in an escalation of privileges.

Solution

Implement the attached corrections or import the relevant Support Package.

CVSS

Score 4.0 Vector: AV:N/AC:L/AU:S/C:P/I:N/A:N

Full note on SAP: SAP Support Launchpad note 1675533

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

#Basis Components#Web Dynpro#Configurable Component#Floorplanmanager

Explore More