Skip links
RedRays - Your SAP Security Solution
Picture of Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

SAP Security on Udemy

Security correction Username hard coded, SAP security note 1336947

SAP Note 1336947
SAP Security Note
Low priority

SAP security note 1336947, “Security correction: Username hard coded”, is a program error note released on 08.10.2009. Below are the symptom, SAP recommended solution and reason and prerequisites.

ComponentSupply Chain Management > Forecasting and Replenishment > Replenishment Workbench
CategoryProgram error
PriorityCorrection with low priority
TypeSAP Security Note
Version3
StatusReleased for Customer
Released on08.10.2009
LanguageEnglish

Description

Symptom

Username is hard coded in a portion of a code which is no longer relevant. The code containing the hard coded username has been added for internal testing and does not have any effect on the business process and cannot harm any component. Hence, implementing this note cannot cause any kind of damage.

Solution

Implement the correction instructions.

Reason and prerequisites

The username was hard coded in the method /FRE/UI_CL_TS_GRAPHIC->TEST_IXML which is not compliant with security standards.

Full note on SAP: SAP Support Launchpad note 1336947

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

#SCM#F&R#RWB

Explore More