Skip links
Picture of Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

SOBJ Display of object directory permits changes, SAP security note 1136823

SAP Note 1136823
SAP Security Note
High priority

SAP security note 1136823, "SOBJ: Display of object directory permits changes", is a note released on October 8, 2009. Below are the symptom and SAP recommended solution.

ComponentBC-CTS-ORG (Basis Components > Change and Transport System > Workbench/Customizing Organizer)
PriorityCorrection with high priority
TypeSAP Security Note
Released onOctober 8, 2009
LanguageEnglish

Description

Symptom

In transaction SOBJ, when processing logical objects, selecting "Object Directory Entry" to display the object directory entry of a logical transport object inadvertently allows switching to change mode. This enables modifications that should be restricted to display-only access.

Solution

Implement the correction instructions using the SAP Note Assistant or import the relevant Support Package to resolve the issue.

Reason and prerequisites

This issue is caused by a program error within the SAP system.

References

Full note on SAP: SAP Support Launchpad note 1136823

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

Explore More