Skip links
Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

Switchable authorization checks for RFC in SLCM(Student Life cycle Management), SAP security note 2030144

Description

UPDATE 13th August 2019: This note has been re-released with the updated ‘Support packages’. We extended the validity of the manual instructions for SAP_BASIS 702 release from SP 15 to SP 18.

UPDATE 11th March 2019 : This note has been re-released with manual correction updates, additionally CVSS information is also made available.

This SAP note describes new switchable authorization checks for RFC function modules in Student Life cycle Management application.

Available fix and Supported packages

  • IS-PS-CA | 600 | 600
  • IS-PS-CA | 602 | 602
  • IS-PS-CA | 603 | 603
  • IS-PS-CA | 604 | 604
  • IS-PS-CA | 605 | 605
  • IS-PS-CA | 606 | 606
  • IS-PS-CA | 616 | 616
  • IS-PS-CA | 617 | 617
  • IS-PS-CA 600 | SAPK-60026INISPSCA |
  • IS-PS-CA 602 | SAPK-60216INISPSCA |
  • IS-PS-CA 606 | SAPK-60613INISPSCA |
  • IS-PS-CA 616 | SAPK-61608INISPSCA |
  • IS-PS-CA 617 | SAPK-61706INISPSCA |
  • IS-PS-CA 600 | SAPK-60027INISPSCA |
  • IS-PS-CA 602 | SAPK-60217INISPSCA |
  • IS-PS-CA 603 | SAPK-60316INISPSCA |
  • IS-PS-CA 604 | SAPK-60417INISPSCA |
  • IS-PS-CA 605 | SAPK-60514INISPSCA |
  • IS-PS-CA 606 | SAPK-60614INISPSCA |
  • IS-PS-CA 616 | SAPK-61609INISPSCA |
  • IS-PS-CA 617 | SAPK-61707INISPSCA |

Affected component

    IS-HER-CM
    Student Lifecycle Management

CVSS

Score: 6.3
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

PoC

Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.

URL

https://launchpad.support.sap.com/#/notes/2030144

TAGS

#SACF
#RFC
#authorization
#Appraisal

More to explorer

Special offer for SAP Security Udemy course!

$ 9.99

Join “SAP Security Core Concepts and Security Administration” which is part of the Blackhat course series.