Update 1 to security note 1500050, SAP security note 1774270

SAP security note 1774270, “Update 1 to security note 1500050”, is a program error note released on June 11, 2013. Below are the symptom and SAP recommended solution.

Description

Symptom

This SAP Note supplements the correction instructions in security note 1500050. Correction instructions have been added for the following releases: SAP_APPL from Release 4.0B up to 6.16.

When you execute transaction OMY0 or the report RMDATSHO, a program termination may occur with the identification DATASET_READ_ERROR. The problem occurs if you perform the execution with a variant for which only a physical file name is saved.

Solution

Implement the attached correction instructions of this update note regarding SAP Note 1500050 to ensure that the system functions correctly.

Reason and prerequisites

The correction instructions in security note 1500050 must be supplemented to address the identified issues. This document resolves the side effects related to SAP Note 1500050.

CVSS

Score 0

References

• LO-MD-MM: Potential Directory Traversal