SAP Security Note
High priority
SAP security note 1618255, "Update #1 to Security Note 1506970", is a program error note released on 30.11.2011. Below are the symptom and SAP recommended solution.
Description
Symptom
Security Note 1506970 has been re-released, removing the unnecessary manual correction instructions for the following releases:
- SAP SRM 4.0
- SAP SRM 5.0
- SAP SRM 6.0
- SAP SRM 7.0
- SAP SRM 7.01
Solution
This note serves as a reminder to implement the updated Security Note no. 1506970.
Reason and prerequisites
Implementing Security Note 1506970 will deactivate the critical source code.
References
Full note on SAP: SAP Support Launchpad note 1618255
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
