SAP Note 1409234
SAP Security Note
HotNews
SAP Security Note
HotNews
SAP security note 1409234, "Security: Actions can be executed/transactions can be started", is a program error note released on 02/22/2010. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
You cannot execute actions of the main view in a Web Dynpro ABAP even though no UI element is connected to the action. You can start some transactions without an authorization check being carried out.
Solution
Implement the correction instructions or import the relevant Support Package.
Reason and prerequisites
This problem is due to a program error.
Affected components
- SAP_BASIS from 700 to 702
- SAP_BASIS from 710 to 730
- SAP_BASIS from 72L to 800
Full note on SAP: SAP Support Launchpad note 1409234
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
