SAP Note 1169248
SAP security note 1169248, "Security note: Security problem in WS Navigator", is a note. Below are the symptom and SAP recommended solution.
Description
Symptom
A security flaw in WS Navigator allows stealing of user data.
Solution
The application from which the WS Navigator is a part – sap.com/com.sap.engine.services.webservices.tool should be disabled (see SAP J2EE Engine documentation) or the system should be updated to SP21 for NW04 or SP13 for NW04s. This is only a test tool, so it cannot affect other functionality if disabled.
References
This note refers to
Referenced by
Full note on SAP: SAP Support Launchpad note 1169248
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
