Home / Vulnerability Database / ABAP : Unsafe database clients access control
ABAP

ABAP : Unsafe database clients access control

Overview

A client can access the data of other clients.

Each client is an autonomous unit. Automatic client processing in the Open SQL functions ensures that applications can access the data of only the current client. In Open SQL, disabling automatic client processing by adding CLIENT SPECIFIED or switching to another client by adding USING CLIENT can be viewed as access to someone else’s information that is critical for safety. In Native SQL, there is no automatic processing of the client, and the specified client must be explicitly specified in the access conditions. Specifying a client other than the current client entails accessing foreign data.

MEDIUM

DerScanner Severity Score

Do you want to fix ABAP : Unsafe database clients access control in your application?

See also

ABAP

ABAP : Insufficient authorization check

ABAP

ABAP : Empty password

ABAP

ABAP : Weak seed of random number generator