Security Authorization check for technical help, SAP security note 1271688

SAP Note 1271688
SAP Security Note
High priority

SAP security note 1271688, “Security: Authorization check for technical help”, is a program error note released on 09.11.2009. Below are the symptom, SAP recommended solution and the affected software components.

ComponentBasis Components > Web Dynpro > Web Dynpro ABAP > Web Dynpro ABAP Runtime

CategoryProgram error

PriorityCorrection with high priority

TypeSAP Security Note

Version3

StatusReleased for Customer

Released on09.11.2009

LanguageEnglish

Description

Symptom

In a Web Dynpro ABAP application, the system does not perform an additional authorization check when you call the technical help for a field.

Solution

Implement the correction instructions or import the relevant Support Package.

Reason and prerequisites

This problem is caused by a program error.

CVSS

Score 0

References

This note refers to

888889 – Automatic checks for security notes using RSECNOTE (outdated)

Referenced by

888889 – Automatic checks for security notes using RSECNOTE (outdated)

Affected components

SAP_BASIS 700
SAP_BASIS 710

Full note on SAP: SAP Support Launchpad note 1271688

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

#Security #Web Dynpro ABAP #Authorization Check