Skip links
Arpine Maghakyan

Arpine Maghakyan

Security Researcher of RedRays.

Logging of configuration changes not enabled, SAP security note 1451581

Description

In Pipeline Performance Management, the database table holding the configuration data doesn’t have the data changes logging enabled in the technical settings.

Available fix and Supported packages

  • BBPCRM | 520 | 520
  • BBPCRM | 600 | 600
  • BBPCRM | 700 | 700
  • BBPCRM 520 | SAPKU52010 |
  • BBPCRM 600 | SAPKU60008 |
  • BBPCRM 700 | SAPKU70007 |

Affected component

    CRM-ANA-PPM-UI
    User Interface

CVSS

Score: 0

Exploit

Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.

URL

https://launchpad.support.sap.com/#/notes/1451581

TAGS

#Pipeline-Performance-Management
#Security
#CRMD_PPM_PERS
#log
#PPM

More to explorer

SAP Cloud Connector Certificate Validation Issue

Date of Release: February 13, 2024 Advisory ID: CVE-2024-25642 Affected Software: SAP Cloud Connector Versions Affected: 2.15.0 to 2.16.1 Vulnerability Summary:A critical vulnerability,