SAP Security Note
SAP security note 1606213, "Update #1 to Security Note 1515372", is released on July 13, 2011. Below are the symptom and SAP recommended solution.
Description
Symptom
Additional correction instructions for the following releases are provided for the vulnerability “Potential modification or disclosure of persisted data in the ABAP Test Framework” addressed in Security Note 1515372:
- Web AS 6.20, 6.40
- NetWeaver 7.00, 7.01, 7.02, 7.10, 7.11, 7.20
Solution
Apply the correction or the respective support package mentioned in note 1515372.
References
Full note on SAP: SAP Support Launchpad note 1606213
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].



