Overwriting of files in upgrade or EHPI, SAP security note 1514066

SAP security note 1514066, "Overwriting of files in upgrade or EHPI", is a note released on 06.02.2018. Below are the symptom, reason and prerequisites, SAP recommended solution and the affected software components.

Description

Symptom

This security note is relevant only for newly installed systems or those that have not yet been updated using Software Update Manager 1.0 or 2.0. If you have used Software Update Manager since 2014, set the processing status of this SAP Note to "Not Relevant".

Programs of the update tools sometimes create files in the file system of the application server. As a result, the system may access files located in directory areas not intended for this context.

Solution

• Use the current archive for performing an upgrade or installing an Enhancement Package (EHP).
• Check the attached corrections to determine if they can be implemented in your system. If some objects do not exist, you can ignore the relevant corrections.
• Manual Adjustment: depending on your system's history, the program versions may differ from those assumed in the note, potentially causing errors during automatic implementation. Manually adjust the corrections as needed and ensure changes are implemented appropriately. If unsure, contact SAP Support.

Reason and prerequisites

The problem is caused by a program design.

References

Affected components

• SAP_APPL 31I
• SAP_APPL 40A to 40B
• SAP_APPL 45A to 45B
• SAP_BASIS 46A to 46D
• SAP_BASIS 610 to 640
• SAP_BASIS 700 to 702
• SAP_BASIS 710 to 730