SAP Security Note
High priority
SAP security note 1593700, “Potential disclosure or modification of user data”, is a program error note released on 08.11.2011. Below are the symptom and SAP recommended solution.
Description
Symptom
A malicious user can discover information about user data. Additionally, the malicious user could also modify the discovered information.
Solution
Apply the attached correction instruction. Please note that the instruction has some manual steps as well.
Reason and prerequisites
Information such as user data can be discovered using SPM. The modification of user data additionally may result in undesired system behavior.
Full note on SAP: SAP Support Launchpad note 1593700
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].