Skip links
RedRays - Your SAP Security Solution
Picture of Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

SAP Security on Udemy

Package EWBC – Removed from standard system, SAP security note 1487706

SAP Note 1487706SAP Security NoteHigh priority

SAP security note 1487706, "Package EWBC Removed from Standard System", is a release planning information note released on 14.12.2010. Below are the symptom, SAP recommended solution and the affected software components.

ComponentCross-Application Components > European Monetary Union – Euro > Local Currency Conversion
CategoryRelease planning information
PriorityCorrection with high priority
TypeSAP Security Note
Version5
StatusReleased for Customer
Released on14.12.2010
LanguageEnglish

Description

Symptom

Unauthorized changes of tables with the table backup and comparison tool (Transaction 'KGBC').

Solution

  • Remove the package EWBC from the standard system.
  • All relevant reports are commented out.
  • If usage is still required, open a message under the component CA-EUR-CNV.

Reason and prerequisites

The transaction and package were developed for the local currency changeover tool and are no longer supported. Insufficient input validation may allow reflected cross-site scripting.

CVSS

Score 0

References

Affected components

  • SAP_APPL 46B
  • SAP_APPL 46C
  • SAP_APPL 470
  • SAP_APPL 500
  • SAP_APPL 600
  • SAP_APPL 602
  • SAP_APPL 603
  • SAP_APPL 604
  • SAP_APPL 605+

Full note on SAP: SAP Support Launchpad note 1487706

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

#Security Note#security issue#vulnerability#exploit#Table backup and comparison tool#Transaction 'KGBC'

Explore More