Skip links
Picture of Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

Update 1 for Security Note 1298433, SAP security note 1649912

SAP Note 1649912
SAP Security Note
Medium priority

SAP security note 1649912, “Update 1 for Security Note 1298433”, is a program error note released on 14.02.2012. Below are the symptom and SAP recommended solution.

ComponentBC-CST-GW (Basis Components > Client/Server Technology > Gateway/CPIC)
CategoryProgram error
PriorityCorrection with medium priority
TypeSAP Security Note
Version2
StatusReleased for Customer
Released on14.02.2012
LanguageEnglish

Description

Symptom

The solution for the vulnerability described in Note 1298433 (Bypassing security in reginfo & secinfo) is provided for the following additional Support Package patch level.

Kernel release 701, patch level 171.

Solution

Apply the kernel corrections that are specified on the “SP Patch Level” tab.

Reason and prerequisites

Solutions for further Support Package patch levels must be provided for security note 1298433.

References

Full note on SAP: SAP Support Launchpad note 1649912

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

Explore More