Skip links
Arpine Maghakyan

Arpine Maghakyan

Security Researcher of RedRays.

FS-CD Missing authorization checks SAPRGEN_CD, SAP security note 1363371

Description

Using the program SAPRGEN_CD, various includes are generated in FS-CD depending on Customizing. However, the relevant authorization checks for the generation are missing. As a result, users with insufficient authorizations can perform the generation process as well.

Available fix and Supported packages

  • INSURANCE | 464 | 464
  • INSURANCE | 471 | 471
  • INSURANCE | 472 | 472
  • INSURANCE | 600 | 600
  • INSURANCE | 602 | 602
  • INSURANCE | 603 | 603
  • INSURANCE | 604 | 604
  • INSURANCE 464 | SAPKIPIL31 |
  • INSURANCE 471 | SAPKIPIM24 |
  • INSURANCE 472 | SAPKIPIN18 |
  • INSURANCE 600 | SAPK-60017ININSURANC |
  • INSURANCE 602 | SAPK-60207ININSURANC |
  • INSURANCE 603 | SAPK-60306ININSURANC |
  • INSURANCE 604 | SAPK-60405ININSURANC |

Affected component

    FS-CD
    Collections and Disbursements

CVSS

Score: 0

Exploit

Exploit is not available.
For detailed information please contact the mail [email protected]

URL

https://launchpad.support.sap.com/#/notes/1363371

TAGS

#SAPRGEN_CD
#FS-CD
#generation
#CO-PA
#customer-specific-account-determination

More to explorer