Skip links
Picture of Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

Program generator performance RE-FX, SAP security note 1481254

SAP Note 1481254SAP Security NoteLow priority

SAP security note 1481254, "Program generator performance RE-FX", is a program error note released on August 17, 2010. Below are the symptom, SAP recommended solution and the affected software components.

ComponentReal Estate Management > Flexible Real Estate Management (RE-FX)
CategoryProgram error
PriorityCorrection with low priority
TypeSAP Security Note
Version4
StatusReleased for Customer
Released onAugust 17, 2010
LanguageEnglish

Description

Symptom

You can execute the program RFREDSLOADGEN without an authorization check. As a result, this program may negatively affect the system performance if it is executed several times.

Solution

Implement the attached corrections in your system.

Reason and prerequisites

The system does not perform an authorization check.

References

Affected components

  • EA-APPL 500
  • EA-APPL 600
  • EA-APPL 602
  • EA-APPL 603
  • EA-APPL 604
  • EA-APPL 605

Full note on SAP: SAP Support Launchpad note 1481254

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

Explore More

Three identical server cabinets carrying stacks of code of very different heights beside a measuring rule

ABAP Code Security Scan Cost Drivers

What moves the cost of an ABAP code security scan: custom object counts, effective lines, systems in scope, transport gating, triage and retest.