Help Center user name in the URL, SAP security note 1261319

SAP security note 1261319, "Help Center user name in the URL", is a program error note released on 08.10.2009. Below are the symptom, SAP recommended solution and the affected software components.

Description

Symptom

The portal user is transferred to the Help Center in the URL. You use this user in the back end to display personal notes. If the user name is modified in the URL, you can display the notes for another user.

Solution

Since you are using the back-end user, you cannot use the URL for a manipulation.

Reason and prerequisites

The user name is transferred in the URL.

References

• SAP Note 888889 – Automatic checks for security notes using RSECNOTE (outdated)

Affected components

• SAP_BASIS 701
• SAP_BASIS 711