DerScanner
Home / Vulnerability Database / ABAP : No initial check
ABAP

ABAP : No initial check

Overview

The application uses the FOR ALL ENTRIES IN construction without checking the internal table for initialization.

Before using an internal table itab after FOR ALL ENTRIES IN, always check that the internal table is not initial. In an initial internal tables, all rows are read from the database regardless of any further conditions specified after WHERE.

References

  1. WHERE - FOR ALL ENTRIES
  2. ABAP FOR ALL ENTRIES SELECT statement addition in SAP data retrieval
LOW

DerScanner Severity Score

Do you want to fix ABAP : No initial check in your application?

See also

ABAP

ABAP : Insufficient authorization check

ABAP

ABAP : Empty password

ABAP

ABAP : Weak seed of random number generator