Update #1 to Security Note 1480284, SAP security note 1554751

SAP Note 1554751
SAP Security Note
High priority

SAP security note 1554751, "Update #1 to Security Note 1480284", is a program error note released on 01.02.2013. Below are the symptom, SAP recommended solution and the affected software components.

ComponentBasis Components > ABAP Runtime Environment – ABAP Language Issues Only > Syntax, Compiler, Runtime (BC-ABA-LA)

CategoryProgram error

PriorityCorrection with high priority

TypeSAP Security Note

Version3

StatusReleased for Customer

Released on01.02.2013

LanguageEnglish

Description

Symptom

The correction instructions in security note 1480284 for releases 7.10, 7.11, 7.20, and 7.30 do not solve the security issue.

Solution

Please apply the support package mentioned in the original security note 1480284 or apply the correction instruction of this note after you have applied the respective correction instruction of security note 1480284.

Reason and prerequisites

The correction instructions of the original security note 1480284 have not the expected effect for releases 7.10, 7.11, 7.20, and 7.30.

References

SAP Note 1480284 – Directory Traversal in ABAP runtime analysis (SE30)

Affected components

SAP_BASIS from 710 to 730

Full note on SAP: SAP Support Launchpad note 1554751

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

#directory traversal #ABAP Laufzeitanalyse #RSATDOWN #RSATUP #Update