Skip links
Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

Switchable authorization checks for RFC in Payroll, Time Management and ESS/MSS (SAP_HR), SAP security note 2046243

Description

This SAP note describes new switchable authorization checks for RFC function modules in Payroll, Time Management and ESS/MSS.

Available fix and Supported packages

  • SAP_HRRXX | 600 | 600
  • SAP_HRRXX | 604 | 604
  • SAP_HRRXX | 608 | 608
  • SAP_HRGXX | 600 | 600
  • SAP_HRGXX | 604 | 604
  • SAP_HRGXX | 608 | 608
  • SAP_HRRXX 608 | SAPK-60807INSAPHRRXX |
  • SAP_HRRXX 600 | SAPK-600B4INSAPHRRXX |
  • SAP_HRRXX 604 | SAPK-60480INSAPHRRXX |
  • SAP_HRGXX 608 | SAPK-60807INSAPHRGXX |
  • SAP_HRGXX 600 | SAPK-600B4INSAPHRGXX |
  • SAP_HRGXX 604 | SAPK-60480INSAPHRGXX |

Affected component

    PA-PA-XX
    General Parts

CVSS

Score: 0

PoC

Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.

URL

https://launchpad.support.sap.com/#/notes/2046243

TAGS

#SACF
#RFC
#authorization.

More to explorer

Special offer for SAP Security Udemy course!

$ 9.99

Join “SAP Security Core Concepts and Security Administration” which is part of the Blackhat course series.