SAP Security Note
Medium priority
SAP security note 1553287, "Update #1 to Security Note 1496547", is a program error note released on 27.01.2011. Below are the symptom and SAP recommended solution.
Description
Symptom
The correction instructions for the vulnerability described in security note 1496547 ("BAPI_ADMGMTSO_CREATEFROMDATA: Foreign key check is missing") must be corrected for the following releases:
Releases: IS-M 464 up to IS-M Enhancement Package 6
After you implement the original version, when executing BAPI_ADMGMTSO_CREATEFROMDATA, the system issues error message 00 058, which is incorrect. As a result, the creation of an ad order is prevented.
Solution
Import the relevant Support Package or implement the attached advance correction in Note 1496547.
Reason and prerequisites
The correction instructions contained in security note 1496547 contain errors and require a correction.
References
- BAPI: Incorrect error message when creating a grouping
- BAPI_ADMGMTSO_CREATEFROMDATA: Foreign key check is missing
Full note on SAP: SAP Support Launchpad note 1553287
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].