SAP Note 1060643SAP Security NoteHigh priority
SAP security note 1060643, "Security note: Hijacking/sys. login: New login after refresh", is a program error note released on 09.02.2010. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
If you do not exit the browser after a successful logon, you may be able to log on again (after you have logged off) with the same user name and password without having to enter them again.
Solution
Implement the attached correction instructions to correct the error.
Reason and prerequisites
This problem is caused by a program error.
References
This note refers to
Affected components
- SAP_BASIS: Version 640
- SAP_BASIS: Version 700
- SAP_BASIS: Version 710
Full note on SAP: SAP Support Launchpad note 1060643
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
