Potential information disclosure in incident tasks, SAP security note 1802680

SAP security note 1802680, “Potential information disclosure in incident tasks”, is a program error note released on August 13, 2013. Below are the symptom, SAP recommended solution and the affected software components.

Description

Symptom

• Component: Incident Management
• Module: Incident Recording

This SAP Note is a prerequisite for SAP Note 1804016. Incident tasks can potentially reveal information to people who do not have the appropriate access level assigned to their users.

Solution

In the “Support Packages” section, the Support Packages that contain this correction are listed below. Alternatively, you can implement the correction instructions of this SAP Note.

Reason and prerequisites

Before you implement this SAP Note, ensure that you have implemented SAP Note 1754662. The validity of the correction is maintained at the correction instructions.

CVSS

Score 0

References

Affected components

• EHSM 200 (Version 200)
• EHSM 300 (Version 300)