description: Read of RFC destination does not always perform necessary authorization checks, resulting in escalation of privileges to access information on RFC destinations on managed systems and SAP Solution Manager system (ST-PI, before versions 2008_1_700, 2008_1_710, and 740).
problem types: Missing Authorization Check
affected:
{
product: SAP Solution Manager system (ST-PI)
vendor: SAP SE
versions:
status: affected, version: < 2008_1_700
status: affected, version: < 2008_1_710
status: affected, version: < 7.4
}