Skip links
RedRays - Your SAP Security Solution
Picture of Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

SAP Security on Udemy

Missing authorization check in CRM-MKT-MPL-CAL, SAP security note 1703829

SAP Note 1703829
SAP Security Note
HotNews

SAP security note 1703829, "Missing authorization check in CRM-MKT-MPL-CAL", is a note released on 12.06.2012. Below are the symptom and SAP recommended solution.

ComponentCustomer Relationship Management > Marketing > Marketing Planner > Marketing Calendar
PriorityHotNews
TypeSAP Security Note
StatusReleased for Customer
Released on12.06.2012

Description

Symptom

An authenticated user can use functions of CRM-MKT-MPL-CAL to which access should be restricted. This may result in an escalation of privileges.

Solution

A correction is attached to this Note.

Reason and prerequisites

CRM-MKT-MPL-CAL does not contain authorization checks for verifying an authenticated user’s authorization to access certain functions. This omission may lead to undesired system behavior.

References

Full note on SAP: SAP Support Launchpad note 1703829

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

#Customer Relationship Management #Marketing #Marketing Planner #Marketing Calendar

Explore More