Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
6 Critical SAP HANA Vulns Can't Be Fixed With Patches
Newest First  |  Oldest First  |  Threaded View
SanjayK204
50%
50%
SanjayK204,
User Rank: Apprentice
5/31/2018 | 2:32:44 AM
appreciate
H,

 

Thanks for the tip, appreciate it. Your article definitely helped me to understand the core concepts.
I'm most excited about the details your article touch based! I assume it doesn't come out of the box, it sounds like you are saying we'd need to write in the handlers ourselves.
Is there any other articles you would recommend to understand this better?

 

In the HANA migration guide, it is stated to run some consistency checks in FICO (see verbiage below).

I have run these, but I really don't know what I'm looking for - are we running just to make sure they run, running to validate numbers on the reports? Thoughts & guidance are appreciated. Thank you!

3.8 FI/CO: Performing Additional Consistency Checks

To ensure that the source system is consistent, user of Financial Accounting (FI) and Controlling (CO) need to perform some preparatory activities, among others additional consistency checks.

3.2 Product-Specific Preparations of the System Copy Guide, which is mentioned in Further Documentation [page 6].Caution Make sure that no customer data is changed in the meantime. Proceed as follows:

Procedure

1. FI: Run job SAPF190 to perform an additional consistency check. Choose AccountingFinancial AccountingGeneral ledgerPeriodic ProcessingClosingCheck/count. Then choose for○ classic FI: Reconciliation○ new general ledger: Reconciliation (New)

2. FI: You can further check consistency by running the jobs listed below:

○ RFUMSV00 (tax on sales/purchases)

○ RAGITT01 (asset history sheet)

○ RAZUGA01 (asset acquisitions)

○ RAABGA01 (fixed asset retirements)

3. CO: Run the report group 1SIP

 




Appreciate your effort for making such useful blogs and helping the community.  

 

Thanks a heaps,

Irene Hynes

 


Data Leak Week: Billions of Sensitive Files Exposed Online
Kelly Jackson Higgins, Executive Editor at Dark Reading,  12/10/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: Our Endpoint Protection system is a little outdated... 
Current Issue
The Year in Security: 2019
This Tech Digest provides a wrap up and overview of the year's top cybersecurity news stories. It was a year of new twists on old threats, with fears of another WannaCry-type worm and of a possible botnet army of Wi-Fi routers. But 2019 also underscored the risk of firmware and trusted security tools harboring dangerous holes that cybercriminals and nation-state hackers could readily abuse. Read more.
Flash Poll
Rethinking Enterprise Data Defense
Rethinking Enterprise Data Defense
Frustrated with recurring intrusions and breaches, cybersecurity professionals are questioning some of the industrys conventional wisdom. Heres a look at what theyre thinking about.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-19782
PUBLISHED: 2019-12-13
The FTP client in AceaXe Plus 1.0 allows a buffer overflow via a long EHLO response from an FTP server.
CVE-2019-19777
PUBLISHED: 2019-12-13
stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has a heap-based buffer over-read in stbi__load_main.
CVE-2019-19778
PUBLISHED: 2019-12-13
An issue was discovered in libsixel 1.8.2. There is a heap-based buffer over-read in the function load_sixel at loader.c.
CVE-2019-16777
PUBLISHED: 2019-12-13
Versions of the npm CLI prior to 6.13.4 are vulnerable to an Arbitrary File Overwrite. It fails to prevent existing globally-installed binaries to be overwritten by other package installations. For example, if a package was installed globally and created a serve binary, any subsequent installs of pa...
CVE-2019-16775
PUBLISHED: 2019-12-13
Versions of the npm CLI prior to 6.13.3 are vulnerable to an Arbitrary File Write. It is possible for packages to create symlinks to files outside of thenode_modules folder through the bin field upon installation. A properly constructed entry in the package.json bin field would allow a package publi...