Skip links
Arpine Maghakyan

Arpine Maghakyan

Security Researcher of RedRays.

IS-M/ PMD Obsolete source code in master data generator, SAP security note 1355614

Description

This note is important for you if you use the IS-M master data generator through transaction JPMDG2. Obsolete source code segments were removed. These contain ABAP language elements that require development authorization. Up to now, a person who did not have development authorization could insert source code in the system. After you implement this note, unintentionally inserting source code is no longer possible.

Available fix and Supported packages

  • IS-M | 402 | 402
  • IS-M | 464 | 464
  • IS-M | 471 | 471
  • IS-M | 472 | 472
  • IS-M | 600 | 600
  • IS-M | 602 | 602
  • IS-M | 603 | 603
  • IS-M | 604 | 604
  • IS-M 471 | SAPKIPPM23 |
  • IS-M 472 | SAPKIPPN17 |
  • IS-M 600 | SAPK-60016INISM |
  • IS-M 602 | SAPK-60206INISM |
  • IS-M 603 | SAPK-60305INISM |
  • IS-M 604 | SAPK-60404INISM |
  • IS-M 464 | SAPKIPPL31 |

Affected component

    IS-M-MD-PR-MP
    Media Product

CVSS

Score: 0

Exploit

Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.

URL

https://launchpad.support.sap.com/#/notes/1355614

TAGS

#ISMPMD
#JPMDG2

More to explorer

SAP Cloud Connector Certificate Validation Issue

Date of Release: February 13, 2024 Advisory ID: CVE-2024-25642 Affected Software: SAP Cloud Connector Versions Affected: 2.15.0 to 2.16.1 Vulnerability Summary:A critical vulnerability,