SAP security note 1511857, “Potential modification of persisted data in BC-I18”, is a program error note released on December 14, 2010. Below is the security information published by SAP for this note.
Description
Overview
SAP has released Security Note 1511857, addressing a critical vulnerability in the Basis Components > Internationalization (I18N) (BC-I18) module. This vulnerability allows malicious users to exploit specially crafted inputs to modify database commands, which can lead to unauthorized modification of persisted data within the system.
A malicious user can exploit BC-I18 by using specially crafted inputs to modify database commands. This SQL injection vulnerability allows the alteration of data persisted by the system, potentially compromising data integrity and system security.
Solution
To mitigate this vulnerability, apply the attached correction instructions provided by SAP. These instructions are crucial for securing your SAP environment against potential exploits targeting the BC-I18 component.
Full note on SAP: SAP Support Launchpad note 1511857
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].