Skip links
Arpine Maghakyan

Arpine Maghakyan

Security Researcher of RedRays.

Security Note Investigative Case Management, SAP security note 1486475

Description

Program contains code which changes the program#s behavior when a user successfully authenticates with a certain user name.A malicious user can authenticate to ICM without his/her own legitimate credentials and can potentially escalate privileges.

Available fix and Supported packages

  • BBPCRM | 700 | 700
  • BBPCRM | 701 | 701
  • BBPCRM 701 | SAPKU70102 |
  • BBPCRM 700 | SAPKU70008 |

Affected component

    CRM-IPS-ICM-REL
    Relationships and Reliability

CVSS

Score: 0

Exploit

Exploit is not available.
For detailed information please contact the mail [email protected]

URL

https://launchpad.support.sap.com/#/notes/1486475

TAGS

#Backdoor
#hard-coded
#credentials
#ICM-(Investigative-Case-Management).

More to explorer