Skip links
Arpine Maghakyan

Arpine Maghakyan

Security Researcher of RedRays.

IS-M/ PMD Obsolete source code in master data generator, SAP security note 1355614

Description

This note is important for you if you use the IS-M master data generator through transaction JPMDG2. Obsolete source code segments were removed. These contain ABAP language elements that require development authorization. Up to now, a person who did not have development authorization could insert source code in the system. After you implement this note, unintentionally inserting source code is no longer possible.

Available fix and Supported packages

  • IS-M | 402 | 402
  • IS-M | 464 | 464
  • IS-M | 471 | 471
  • IS-M | 472 | 472
  • IS-M | 600 | 600
  • IS-M | 602 | 602
  • IS-M | 603 | 603
  • IS-M | 604 | 604
  • IS-M 471 | SAPKIPPM23 |
  • IS-M 472 | SAPKIPPN17 |
  • IS-M 600 | SAPK-60016INISM |
  • IS-M 602 | SAPK-60206INISM |
  • IS-M 603 | SAPK-60305INISM |
  • IS-M 604 | SAPK-60404INISM |
  • IS-M 464 | SAPKIPPL31 |

Affected component

    IS-M-MD-PR-MP
    Media Product

CVSS

Score: 0

Exploit

Exploit is not available.
For detailed information please contact the mail [email protected]

URL

https://launchpad.support.sap.com/#/notes/1355614

TAGS

#ISMPMD
#JPMDG2

More to explorer