Skip links
RedRays - Your SAP Security Solution
Picture of Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

SAP Security on Udemy

Missing Authorizations Checks for a Customizing Distribution, SAP security note 1597391

SAP Note 1597391
SAP Security Note
High priority

SAP security note 1597391, “Missing Authorizations Checks for a Customizing Distribution”, is a program error note released on 13.12.2011. Below are the symptom, SAP recommended solution and the affected software components.

ComponentBasis Components > Customizing > Customizing Tools (Technicals) > Customizing Cross-System Tools
CategoryProgram error
PriorityCorrection with high priority
TypeSAP Security Note
Version2
StatusReleased for Customer
Released on13.12.2011
LanguageEnglish

Description

Symptom

Authenticated users can access restricted functions within BC-CUS-TOL-CST, which may result in unauthorized escalation of privileges.

Solution

Implement the corrections provided in SAP Note 1597391.

CVSS

Score 6.0 Vector: AV:N/AC:M/AU:S/C:P/I:P/A:P

Affected components

  • SAP_APPL 45B
  • SAP_BASIS (46B to 46D, 620 to 640, 700 to 702, 710 to 730, 731)

Full note on SAP: SAP Support Launchpad note 1597391

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

#Customizing #Cross-System Tools #Customizing Tools #Basis Components

Explore More