SAP Security Note
High priority
SAP security note 751806, "Missing confirmation prompt in CATT function modules", is a program error note released on 18.02.2010. Below are the symptom and SAP recommended solution.
Description
Symptom
Authorizations do not sufficiently protect two CATT function modules from misuse.
Solution
Implement the correction instructions or import the relevant Support Package. The note or correction was enhanced in 3.1I, 4.0B, and 4.5B.
Reason and prerequisites
This problem is caused by a program error.
Full note on SAP: SAP Support Launchpad note 751806
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
