SAP Note 1479197
SAP Security Note
High priority
SAP Security Note
High priority
SAP security note 1479197, "Security Issue on Random Number Generation", was released on August 10, 2010. Below are the symptom and SAP recommended solution.
Description
Symptom
Random number generation, suspicious function. It is recommended for customers to use this note to avoid manipulation of random numbers and suspicious functions.
Solution
The solution includes recommendations related to security fixed in:
- SRM-MDM Catalog 7.01 SP02 Patch 00
- SRM-MDM Catalog 3.0 SP07 Patch 04 for SRM MDM 3.0 Release
Reason and prerequisites
Corporate security issues fixed in this component. The issues were related to random number generation and detection of suspicious functions.
Full note on SAP: SAP Support Launchpad note 1479197
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].