DerScanner
Home / Vulnerability Database / ABAP : Insecure function
ABAP

ABAP : Insecure function

Classification

CWE
CWE-242CWE-676
CWE/SANS Top 25 2011
CWE-676

Overview

This state is insecure for use in applications.

In ABAP, there are functions and constructs intended for internal use only. Examples of such constructions are GENERATE REPORT prog, READ REPORT ... STATE state

References

  1. CWE-242: Use of Inherently Dangerous Function
  2. Internal Statements for Source Code Processing
  3. GENERATE REPORT
  4. CWE-676
MEDIUM

DerScanner Severity Score

Do you want to fix ABAP : Insecure function in your application?

See also

ABAP

ABAP : Insufficient authorization check

ABAP

ABAP : Empty password

ABAP

ABAP : Weak seed of random number generator