Update #1 to Security Note 1487212, SAP security note 1554189

SAP security note 1554189, "Update #1 to Security Note 1487212", is a program error note released on 03.02.2011. Below are the symptom, SAP recommended solution and the affected software components.

Description

Symptom

The validity for the following correction instructions in Security Note 1487212 was adjusted:

• EA-APPL 200: correction instruction 899325, valid from SAPKGPAB11
• EA-APPL 500: correction instruction 899326, valid from SAPKGPAC12

Further correction instructions were added to the solution for the vulnerability described in Note 1487212 (potential modification or disclosure of persisted data PLM-RM) for the following releases:

• EA-APPL 200: valid to SAPKGPAB10
• EA-APPL 500: valid to SAPKGPAC11

Solution

For customers who have not implemented the Support Package SAPKGPAB11 (EA-APPL 200) or SAPKGPAC12 (EA-APPL 500), an alternative correction instruction is available.

Reason and prerequisites

The correction instructions in Security Note 1487212 for Release EA-APPL 200 or EA-APPL 500 can only be implemented without manual changes after Support Packages SAPKGPAB11 (EA-APPL 200) and SAPKGPAC12 (EA-APPL 500) are imported.

References

• SAP Note 1487212: Potential modification or disclosure of persisted data PLM-RM

Affected components

• EA-APPL (200)
• EA-APPL (500)