Skip links
Picture of Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

Not allowed functions in trx. IBIP, SAP security note 1510543

SAP Note 1510543SAP Security Note

SAP security note 1510543, “Not allowed functions in trx. IBIP”, is published by SAP for the affected component listed below. The description reproduces the information SAP released for this note.

ComponentPM Plant Maintenance

Description

Transaction IBIP allows access to application server file system.

CVSS

Score 0

Affected components

  • SAP_APPL | 40B | 40B
  • SAP_APPL | 45B | 45B
  • SAP_APPL | 46B | 46B
  • SAP_APPL | 46C | 46C
  • SAP_APPL | 470 | 470
  • SAP_APPL | 500 | 500
  • SAP_APPL | 600 | 600
  • SAP_APPL | 602 | 602
  • SAP_APPL | 603 | 603
  • SAP_APPL | 604 | 604
  • SAP_APPL | 605 | 605
  • SAP_APPL 40B | SAPKH40B89
  • SAP_APPL 45B | SAPKH45B67
  • SAP_APPL 46B | SAPKH46B62
  • SAP_APPL 470 | SAPKH47035
  • SAP_APPL 500 | SAPKH50024
  • SAP_APPL 600 | SAPKH60019
  • SAP_APPL 602 | SAPKH60209
  • SAP_APPL 603 | SAPKH60308
  • SAP_APPL 604 | SAPKH60409

Full note on SAP: SAP Support Launchpad note 1510543

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

Explore More