Skip links
RedRays - Your SAP Security Solution
Picture of Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

SAP Security on Udemy

User Guest granted privileges of a real user, SAP security note 1720677

SAP Note 1720677SAP Security NoteHotNews

SAP security note 1720677, "User Guest granted privileges of a real user", is a program error note released on 09.10.2012. Below are the symptom, SAP recommended solution and the affected software components.

ComponentBasis Components > NetWeaver Application Server Java > Security, User Management
CategoryProgram error
PriorityHotNews
TypeSAP Security Note
Version3
StatusReleased for Customer
Released on09.10.2012
LanguageEnglish

Description

Symptom

A legitimate user opens a browser and accesses a protected resource on AS Java. The user is granted access without authentication, and notices that the currently authenticated user is a different one.

Solution

Update your AS Java to an SP or release where the issue is fixed. See the SP Patch Level section for details and available patches.

Reason and prerequisites

This issue is caused by a program error.

Affected components

  • SERVERCORE 7.20 to 7.20
  • SERVERCORE 7.30 to 7.30
  • SERVERCORE 7.31 to 7.31

Full note on SAP: SAP Support Launchpad note 1720677

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

#User#No authentication#Other user data#Different authenticated user

Explore More