SAP Security Note
Medium priority
SAP security note 1536979, "Potential information disclosure relating to code flow", is a program error note released on 08.03.2011. Below are the symptom and SAP recommended solution.
Description
Symptom
Potential information disclosure relating to code flow.
Solution
The issue has been corrected. To get this correction, please upgrade the client to at least the patch version specified in the "SP Patch Level" section of this note, as relevant to your release and SP.
Reason and prerequisites
A malicious user can discover information relating to BC-MOB-LAP and BC-MOB-PDA. This information could be used to specialize attacks against the NetWeaver Mobile client.
References
Full note on SAP: SAP Support Launchpad note 1536979
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
