SAP Note 1705798
SAP Security Note
High priority
SAP Security Note
High priority
SAP security note 1705798, "Missing authorization check in IS-A-MON.", is released on August 14, 2012. Below are the symptom, SAP recommended solution and references for this note.
Description
Symptom
Authenticated users may access functions in IS-A-MON that should be restricted, allowing unauthorized privilege escalation.
Solution
Implement the corrections provided in the SAP Security Note 1705798 using SNOTE. Ensure that all relevant support packages are applied to address the missing authorization checks.
References
Full note on SAP: SAP Support Launchpad note 1705798
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
