SAP security note 1673533, "Prevent Backdoors in SAP CRM Mobile Sales (IPC Server)", is a program error note released on 12.06.2012. Below are the symptom and SAP recommended solution.
Description
Symptom
An attacker can be authenticated to the IPC server used by SAP CRM Mobile Sales without having their own legitimate credentials, or they may escalate privileges.
Solution
To correct the issue, apply the Java patch valid for your CRM release from the SAP Service Marketplace.
Reason and prerequisites
The vulnerability is caused by a hard-coded username and password combination in the program's source code. An attacker who specifies these credentials can log on to the system without having been assigned legitimate access by the system administrator(s). If a user already has privileges with which they can log on, an escalation of privileges may be possible if the hard-coded account has higher access rights than the original user.
Full note on SAP: SAP Support Launchpad note 1673533
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].