SAP Knowledge Base Article - Preview

3145476 - Missing Segregation of Duty in SAP Solution Manager Diagnostics Root Cause Analysis Tools


Solution Manager allows an administrator to execute code on all connected Diagnostics Agents and browse files on their systems. An attacker could thereby control the managed systems. It is considered that this is a missing segregation of duty for the SAP Solution Manager administrator.



SAP Solution Manager 7.2


SAP Solution Manager 7.2


Escalation of priveleges , KBA , SV-SMG-DIA-SRV-AGT , Agent Framework , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.