Skip links
RedRays - Your SAP Security Solution
Picture of Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

SAP Security on Udemy

Security-relevant corrections for ICM web cache, SAP security note 1015459

SAP Note 1015459
SAP Security Note
High priority

SAP security note 1015459, "Security-relevant corrections for ICM web cache", was released on October 8, 2009. Below are the symptom and SAP recommended solution.

ComponentBasis Components > Client/Server Technology > Internet Communication Manager (BC-CST-IC)
PriorityHigh priority
TypeSAP Security Note
Released onOctober 8, 2009
LanguageEnglish

Description

Symptom

Certain types of invalid or manipulated URLs cause the ICM (Internet Communication Manager) process to terminate.

Solution

The correction is provided through kernel patches for:

  • Release 6.40 (patch level 166)
  • Release 7.00 (patch level 93)

Reason and prerequisites

This issue arises from an error in the internal processing of URL strings for the ICM web cache.

References

Full note on SAP: SAP Support Launchpad note 1015459

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

#ICM #Web Cache #URL Handling

Explore More