Skip links
Picture of Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

WDA Application configurations, SAP security note 1443973

SAP Note 1443973
SAP Security Note
Medium priority

SAP security note 1443973, "WDA: Application configurations", is a program error note released on 09.03.2010. Below are the symptom, SAP recommended solution and the affected software components.

ComponentBasis Components > Web Dynpro > Web Dynpro ABAP
CategoryProgram error
PriorityCorrection with medium priority
TypeSAP Security Note
Version1
StatusReleased for Customer
Released on09.03.2010
LanguageEnglish

Description

Symptom

The system does not check whether an application configuration is also suitable for the application. As a result, a user may be able to use a suitable input to redefine an incorrect application configuration parameter that they should not be able to redefine.

Solution

Implement the attached corrections.

Reason and prerequisites

This problem is caused by a missing check.

CVSS

Score 0

References

Affected components

  • SAP_BASIS from 700 to 702
  • SAP_BASIS from 710 to 720

Full note on SAP: SAP Support Launchpad note 1443973

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

Explore More