Skip links
Arpine Maghakyan

Arpine Maghakyan

Security Researcher of RedRays.

SAP BP Authorization check with F4 help, SAP security note 545334

Description

You want the system to consider your authorization to maintain and display only certain business partner master records in the dialog with the F4 helps for the business partner as well.
Therefore, you only want to be provided master records in the selection list when you are searching a certain business partner which you may process according to your maintained authorizations.
You want this function to be available with F4 helps for the business partner field as well as with the locator search help in the business partner maintenance (Transaction BP) and in the search for business partners in the CIC (here via BAPI BAPI_BUPA_SEARCH).

Available fix and Supported packages

  • SAP_ABA | 50A | 50A
  • SAP_ABA | 620 | 620
  • SAP_ABA 50A | SAPKA50A24 |
  • SAP_ABA 620 | SAPKA62009 |

Affected component

    AP-MD-BP
    Business Partner

CVSS

Score: 0

Exploit

Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.

URL

https://launchpad.support.sap.com/#/notes/545334

TAGS

#BP_DIALOG

More to explorer

SAP Cloud Connector Certificate Validation Issue

Date of Release: February 13, 2024 Advisory ID: CVE-2024-25642 Affected Software: SAP Cloud Connector Versions Affected: 2.15.0 to 2.16.1 Vulnerability Summary:A critical vulnerability,