SAP security note 2579693, "Missing Authorization check in Dynpro Processing", is a note. Below are the symptom, reason and prerequisites, SAP recommended solution and the affected software components.
Description
Symptom
Dynpro Processing does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. Impacts include:
- Abuse functionality restricted to a particular user group
- Read, modify, or delete restricted data
Solution
This problem has been corrected with a kernel patch. The patch introduces an authorization check for the system OK codes $PXA and $TYPELOADS.
Authorization required:
- Authorization Object: S_ADMI_FCD
- Field Name: S_ADMI_FCD
- Value: SYNC
This authorization is also required for other buffer resetting system OK codes like $SYNC, $NAM, $TAB, etc.
Please import a new kernel. For information about the required kernel level, see Support Packages & Patches.
Reason and prerequisites
Missing authorization check when executing system OK codes $PXA and $TYPELOADS.
Affected components
- KERNEL 7.21 32-BIT
- KERNEL 7.21 32-BIT UNICODE
- KERNEL 7.21 64-BIT
- KERNEL 7.21 64-BIT UNICODE
- KERNEL 7.22 64-BIT
- KERNEL 7.22 EXT 64-BIT
- KERNEL 7.45 64-BIT
- KERNEL 7.53 64-BIT
- KERNEL 7.71 64-BIT UNICODE
Full note on SAP: SAP Support Launchpad note 2579693
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
