SAP Security Note
High priority
SAP security note 1136823, "SOBJ: Display of object directory permits changes", is a note released on October 8, 2009. Below are the symptom and SAP recommended solution.
Description
Symptom
In transaction SOBJ, when processing logical objects, selecting "Object Directory Entry" to display the object directory entry of a logical transport object inadvertently allows switching to change mode. This enables modifications that should be restricted to display-only access.
Solution
Implement the correction instructions using the SAP Note Assistant or import the relevant Support Package to resolve the issue.
Reason and prerequisites
This issue is caused by a program error within the SAP system.
References
Full note on SAP: SAP Support Launchpad note 1136823
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].




