Potential bypass of unified connectivity runtime checks possible in BC-MID-RFC, SAP security note 2139366

SAP security note 2139366, "Potential bypass of unified connectivity runtime checks possible in BC-MID-RFC". Below are the symptom, SAP recommended solution and the affected software components.

Description

Symptom

A bypass of the Unified Connectivity runtime check is possible in case multiple function modules are invoked by one program.

Solution

To address this issue, you must:

• Apply the Support Package of SAP Note 2095083 and this SAP Note 2139366.
• Alternatively, apply the correction instructions of SAP Note 2095083 and this SAP Note 2139366.

Reason and prerequisites

Unified Connectivity fails to apply all checks in case of multiple calls. For more details, see functional SAP Note 2095083.

CVSS

Score 6.0 / 10 Vector: AV:N/AC:M/Au:S/C:P/I:P/A:P

References

Affected components

• SAP_BASIS 740