Solution : https://service.sap.com/sap/support/notes/1542645 (SAP Service marketplace login required)
Key words : 
terms sapterm reason, special authorization object, attached correction instructions, note corrects code, hardcoded user names, hardcoded user, malicious user, elevated authorizations, creates users, rfc destinations
Related Notes : 
       
| 888889 | Automatic checks for security notes using RSECNOTE |