SAP Note 1552417
SAP security note 1552417, “Missing authorization check in Claims Management”. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
An authenticated user can access functions within Claims Management that should be restricted, potentially leading to privilege escalation.
Solution
Implement this security note or the corresponding support package.
Reason and prerequisites
Claims Management lacks authorization checks for certain functions. This omission may result in unauthorized access and undesired system behavior.
Affected components
- INSURANCE: Versions 464, 471, 472, 600, 602, 603, 604, 605
Full note on SAP: SAP Support Launchpad note 1552417
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
