Skip links

Lockout bypass through function module RFC_SYSTEM_INFO, SAP security note 604816

Description

The function module RFC_SYSTEM_INFO returns information as to whether the used logon data was correct.

Available fix and Supported packages

  • SAP_APPL | 31I | 31I
  • SAP_APPL | 40A | 40B
  • SAP_APPL | 45A | 45B

Affected component

    BC-MID-RFC
    RFC

CVSS

Score: 0

Exploit

Exploit is not available.
For detailed information please contact the mail [email protected]

URL

https://launchpad.support.sap.com/#/notes/604816

TAGS

#VulnerabilitiesInternet-Security-Systems-“sap-sapinfo-lockout-bypass”Security-Focus-Online-“SAP-R/3-sapinfo-RFC-API-Account-Locking-Weakness””SAP-R/3
#account-locking-and-RFC-SDK”