SAP Note 1661909
SAP Security Note
Medium priority
SAP Security Note
Medium priority
SAP security note 1661909, “Potential information disclosure relating to server info”, is a program error note released on 10.07.2012. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
Possible malicious use of information displayed in the Web DAV Stack Trace.
Solution
The information is no longer displayed in the following releases. See SP patch level.
Reason and prerequisites
Possible malicious use of information displayed in the Web DAV Stack Trace.
References
This note refers to
Affected components
- KMC-CM: 7.00 to 7.02
- KMC-CM: 7.30 to 7.30
- KMC-CM: 7.31 to 7.31
- EP-CM: 6.0_640 to 6.0_640
Full note on SAP: SAP Support Launchpad note 1661909
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].