SAP Security Note
Medium priority
SAP security note 1453938, "Potential information disclosure relating to WebDynpro ABAP", is a program error note released on 04.02.2011. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
A malicious user can discover information relating to Business Data which are processed with applications built in WebDynpro ABAP.
Solution
Import the appropriate service pack or the correction instructions.
Reason and prerequisites
Information such as the images processed in applications can be discovered through the use of WebDynpro ABAP. Please apply Note 1525399 too before applying this note for correct transportation of the correction.
CVSS
Score 0
References
This note refers to
Affected components
- SAP_BASIS (700 to 702)
- SAP_BASIS (710 to 720)
Full note on SAP: SAP Support Launchpad note 1453938
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
