Skip links

Switchable Authorization checks for RFC in SAP Leasing, SAP security note 2495462

Description

UPDATE 28th April 2020: This note has been re-released with updated ‘Correction instruction’ information for the release ERP 6.0 EhP4, software component version EA_APPL 604.

This SAP note describes new switchable authorization checks for RFC function modules in SAP Leasing / FI-LA.

Available fix and Supported packages

  • SAP_APPL | 617 | 617
  • SAP_APPL | 618 | 618
  • SAP_APPL | 619 | 619
  • SAPSCORE | 112 | 112
  • S4CORE | 100 | 100
  • S4CORE | 101 | 101
  • S4CORE | 102 | 102
  • S4CORE | 103 | 103
  • EA-APPL | 600 | 600
  • EA-APPL | 602 | 602
  • EA-APPL | 603 | 603
  • EA-APPL | 604 | 604
  • EA-APPL | 605 | 605
  • EA-APPL | 606 | 606
  • EA-APPL | 616 | 616
  • EA-APPL | 617 | 617
  • FI-CAX | 602 | 602
  • FI-CAX | 603 | 603
  • FI-CAX | 604 | 604
  • FI-CAX | 605 | 605
  • SAP_APPL 618 | SAPK-61810INSAPAPPL |
  • | SAPK-S4CLOUD_1805 |
  • S4CORE 100 | SAPK-10006INS4CORE |
  • S4CORE 101 | SAPK-10104INS4CORE |
  • S4CORE 102 | SAPK-10202INS4CORE |
  • EA-APPL 605 | SAPK-60517INEAAPPL |
  • EA-APPL 616 | SAPK-61612INEAAPPL |
  • EA-APPL 606 | SAPK-60621INEAAPPL |
  • EA-APPL 600 | SAPKGPAD31 |
  • EA-APPL 602 | SAPK-60221INEAAPPL |
  • EA-APPL 617 | SAPK-61716INEAAPPL |
  • EA-APPL 603 | SAPK-60320INEAAPPL |
  • EA-APPL 604 | SAPK-60421INEAAPPL |
  • FI-CAX 605 | SAPK-60517INFICAX |
  • FI-CAX 616 | SAPK-61612INFICAX |
  • FI-CAX 800 | SAPK-80006INFICAX |
  • FI-CAX 801 | SAPK-80104INFICAX |
  • FI-CAX 606 | SAPK-60621INFICAX |
  • FI-CAX 602 | SAPK-60221INFICAX |
  • FI-CAX 617 | SAPK-61716INFICAX |

Affected component

    FI-LA
    Lease Accounting Engine

CVSS

Score: 6.3
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Exploit

Exploit is not available.
For detailed information please contact the mail [email protected]

URL

https://launchpad.support.sap.com/#/notes/2495462

TAGS

#SACF
#RFC
#authorization
#LAE
#FI-LA
#leasing-contract-transfer