Skip links
Arpine Maghakyan

Arpine Maghakyan

Security Researcher of RedRays.

SU01 SAP GUI input history saves passwords, SAP security note 1384632

Description

You use transaction SU01 to generate a new initial password for a user. This password is displayed as a plaintext in the password field and saved in the input history of SAP GUI as a result.
This is a security risk.

Available fix and Supported packages

  • SAP_BASIS | 46C | 46C
  • SAP_BASIS | 620 | 640
  • SAP_BASIS | 700 | 702
  • SAP_BASIS 701 | SAPKB70106 |
  • SAP_BASIS 46C | SAPKB46C60 |
  • SAP_BASIS 620 | SAPKB62068 |
  • SAP_BASIS 640 | SAPKB64026 |
  • SAP_BASIS 700 | SAPKB70022 |

Affected component

    BC-SEC-USR-ADM
    Users and Authorization administration

CVSS

Score: 0

Exploit

Exploit is not available.
For detailed information please contact the mail [email protected]

URL

https://launchpad.support.sap.com/#/notes/1384632

TAGS

#INVISIBLE
#password

More to explorer