Background documentationSecurity Aspects When Accessing Temporary Files

 

The Billing Consolidation Connector (FIN-FSCM-BC-CON) component provides directories for temporary files in the system and uses them in the EDX_SETUP table. You can view these directories with transaction AL11. For easy access to this data, these files should also be available through the Network File System (NFS) protocol.

The use of such directories makes it possible for a malicious user to gain read or write access to any files on the application server, thus enabling them to disclose confidential information, corrupt data, or change the system behavior. To understand these problems and know how to avoid them, you must read SAP Note 1497003 and follow the instructions given.

The software of the Billing Consolidation Connector (FIN-FSCM-BC-CON) component is already prepared for these extensions. However, to ensure the secure operation of all functions, you must also read SAP Note 1508060 and follow the instructions given.