Skip links
Picture of Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

Not allowed symbols in trx. IBIP, SAP security note 1488424

SAP Note 1488424
SAP Security Note
High priority

SAP security note 1488424, "Not allowed symbols in trx. IBIP", is a program error note released on 14.12.2010. Below are the symptom and the SAP recommended solution.

ComponentMiscellaneous > For internal SAP use only! > Security & DPP questions in applications > Security questions & issues in applications
CategoryProgram error
PriorityHigh priority
TypeSAP Security Note
Version7
StatusReleased for Customer
Released on14.12.2010
LanguageEnglish

Description

Symptom

It is possible to use not allowed symbols, like ‘..’, ‘/’, ‘\\’, etc., in the transaction IBIP in the file name field.

Solution

This note is OBSOLETE; the new note 1530895 provides a comprehensive solution for the mentioned issue. Please implement the note 1530895!

Reason and prerequisites

Program error

Full note on SAP: SAP Support Launchpad note 1488424

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

Explore More