Security note Security problem with FileDownload, SAP security note 1145873

SAP security note 1145873, "Security Problem with FileDownload in Web Dynpro ABAP", is a program error note released on October 8, 2009. Below are the symptom, SAP recommended solution, reason and prerequisites and the affected software components.

Description

Symptom

There is a security problem with a FileDownload UI element for Web Dynpro ABAP.

Solution

We strongly recommend that you implement this note if you use Web Dynpro ABAP applications that contain FileDownload UI elements. This is particularly important if these applications are also available on the Internet or are related to applications that are available on the Internet.

Implement the attached correction instructions to correct the error.

Reason and prerequisites

This problem is caused by a program error.

References

• 1145736 – Special characters not supported during FileDownload
• 888889 – Automatic checks for security notes using RSECNOTE (outdated)

Affected components

• SAP_BASIS 700 to 701
• SAP_BASIS 710 to 711