Skip links
Arpine Maghakyan

Arpine Maghakyan

Security Researcher of RedRays.

Handling Authorization concerns due to Note1030838 & 1381945, SAP security note 1411818

Description

At present if View Maintenance Authorization Enhancement has been implemented in a system, any Application table, that has a maintenance dialog, can lead to improper information disclosure. The note 1030838(Valid from release 610 upto 700) or note 1381945(Valid for release 701 upto 710) should have been implemented in the system for this symptom to occur.

Available fix and Supported packages

  • SAP_BASIS | 620 | 640
  • SAP_BASIS | 700 | 702
  • SAP_BASIS | 710 | 720
  • SAP_BASIS 710 | SAPKB71010 |
  • SAP_BASIS 711 | SAPKB71105 |
  • SAP_BASIS 620 | SAPKB62068 |
  • SAP_BASIS 640 | SAPKB64026 |
  • SAP_BASIS 720 | SAPKB72003 |
  • SAP_BASIS 702 | SAPKB70203 |
  • SAP_BASIS 700 | SAPKB70022 |
  • SAP_BASIS 701 | SAPKB70107 |

Affected component

    BC-CUS-TOL-TME
    View Maintenance Tool

CVSS

Score: 0

Exploit

Exploit is not available.
For detailed information please contact the mail [email protected]

URL

https://launchpad.support.sap.com/#/notes/1411818

TAGS

#View-Maintenance
#SM30
#S_TABU_DIS
#Authorization-Groups
#AuthorizationEnhancement
#Application-Tables
#User
#Note
#1030838
#1381947
#BADI
#Implementation
#System.

More to explorer