SAP Security Note
Medium priority
SAP security note 1502787, "Missing Authorization for Obsolete PFW after import function", is a note released on December 14, 2010. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
An authenticated user can trigger an obsolete after import functionality in the Processing Framework (PFW) application without the required authorization. This lack of permission checks may result in undesired system behavior related to obsolete function modules.
Solution
Implement the attached correction or the corresponding support package.
CVSS
Score 0
Full note on SAP: SAP Support Launchpad note 1502787
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].