SAP “patched” bug still has holes

The expensive esoteric management software company which no-one is really sure what it does, SAP, is the subject of a US security alert over a vulnerability the firm disabled six years ago.

Apparently the hole still gives outside attackers remote control over older SAP systems if the software is not properly patched.

SAP fixed the problem, but left the decision over whether to switch off an easy access setting up to its customers.