SAP Security Note
High priority
SAP security note 1844202, “SUIM| RSUSR002 User ‘…………’ is not found”, is a program error note released on June 11, 2013. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
When using the report RSUSR002 to select users based on specific criteria (such as user groups, roles, profiles, authorizations, etc.), the report fails to find the user with the username ‘…………’.
Solution
To resolve this issue:
- Implement Correction Instructions: Use the Note Assistant to apply the correction instructions provided in this SAP Note.
- Import Support Package: Alternatively, import the relevant Support Package into your affected systems.
- Additional Step (if applicable): If the user ‘…………’ does not exist in your system, implement SAP Note 1731549 and set maximum restrictions on the username in the Customizing as described in the note. This will prevent such a username from being assigned.
Reason and prerequisites
This issue is a result of a program error caused by the side effect of SAP Note 694250.
CVSS
Score 4.6 Vector: AV:N/AC:H/AU:S/C:P/I:P/A:P
References
Affected components
- SAP_BASIS: 46B, 46C, 620, 640, 700, 701, 702, 710, 711, 720, 730, 731, 740
Full note on SAP: SAP Support Launchpad note 1844202
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
