SAP security note 1481254, "Program generator performance RE-FX", is a program error note released on August 17, 2010. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
You can execute the program RFREDSLOADGEN without an authorization check. As a result, this program may negatively affect the system performance if it is executed several times.
Solution
Implement the attached corrections in your system.
Reason and prerequisites
The system does not perform an authorization check.
References
- SAP Note 1515265: Composite SAP note: Security of Real Estate Mgmt (RE/RE-FX)
- SAP Note 888889: Automatic checks for security notes using RSECNOTE (outdated)
Affected components
- EA-APPL 500
- EA-APPL 600
- EA-APPL 602
- EA-APPL 603
- EA-APPL 604
- EA-APPL 605
Full note on SAP: SAP Support Launchpad note 1481254
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].




