SAP security note 1691201, "Update #2 for security note 1512352", is a program error note released on 16.03.2012. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
Security Note 1512352 was released again with an updated solution.
Solution
Implement the following SAP Notes:
If Security Note 1512352 already exists in your system:
- Report RCCTBI01: SAP Note 1612736
- Report RCCLBI01: SAP Note 1620141
- Report RCCLBI02: SAP Note 1620084
- Report RCCLBI03: SAP Notes 1555924 and 1667018
- Report RCCLBISC: SAP Note 1667832
- Report RCCLBISH: SAP Note 1668730
- Report RCCLDI01: SAP Note 1668992
- Report RCCTBISC: SAP Note 1669488
If Security Note 1512352 does not yet exist in your system:
- First, implement Note 1512352 into your system.
- Then, implement the additional SAP Notes listed above.
Reason and prerequisites
The solution of Security Note 1512352 has been updated.
References
- 1669488 – RCCTBISC Error message SG 806
- 1668992 – RCCLDI01 / RCCTBI01 Error message SG 806
- 1668730 – RCCLBISH error message SG 806
- 1667832 – RCCLBISC error message SG 806
- 1667018 – RCCLBI03 Error message SG 806
- 1620141 – RCCLBI01: Error message SG 806
- 1620084 – RCCLBI02: Error message SG 806
- 1612736 – RCCTBI01 Error message SG 806
- 1555924 – Update #1 for Security Note 1512352
- 1512352 – Directory Traversal in batch input reports in class system
Affected components
- SAP_APPL 31I
- SAP_APPL 40B
- SAP_APPL 45B
- SAP_APPL 46B
- SAP_APPL 46C
- SAP_ABA 620
- SAP_ABA 640
- SAP_ABA 700 to 702
- SAP_ABA 710 to 711
- SAP_ABA 730
- SAP_ABA 731
Full note on SAP: SAP Support Launchpad note 1691201
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
