Skip links
RedRays - Your SAP Security Solution
Picture of Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

SAP Security on Udemy

Update #1 to Security Note 1551513, SAP security note 1634457

SAP Note 1634457SAP Security NoteHigh priority

SAP security note 1634457, “Update #1 to Security Note 1551513”, is a program error note released on April 10, 2012. Below are the symptom, SAP recommended solution and the affected software components.

ComponentBasis Components > Basis Services/Communication Interfaces > ArchiveLink (BC-SRV-ARL)
CategoryProgram error
PriorityCorrection with high priority
TypeSAP Security Note
Version3
StatusReleased for Customer
Released onApril 10, 2012
LanguageEnglish

Description

Symptom

Correction instructions provided for the vulnerability Missing Authorization Check in BC-SRV-ARL addressed in Security Note 1551513 must be corrected for the following releases: 610, 620, 640, 700, 701, 702, 710, 711, 720, 730, and 731.

Solution

Implement the code correction via SNOTE.

Reason and prerequisites

Security Note 1551513 contains correction instructions which are erroneous. The implementation of Security Note 1551513 is a prerequisite for applying this note.

References

Affected components

  • SAP_BASIS 610 to 640
  • SAP_BASIS 700 to 702
  • SAP_BASIS 710 to 730
  • SAP_BASIS 731

Full note on SAP: SAP Support Launchpad note 1634457

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

#Authorization#Authorization check#BC-SRV-ARL#Update#Update Note

Explore More