Skip links
RedRays - Your SAP Security Solution
Picture of Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

SAP Security on Udemy

Potential information disclosure relating to SAP AS Java, SAP security note 1601805

SAP Note 1601805
SAP Security Note
Medium priority

SAP security note 1601805, "Potential information disclosure relating to SAP AS Java", is a program error note released on 10.04.2012. Below are the symptom, SAP recommended solution and the affected software components.

ComponentBasis Components > Basis Services/Communication Interfaces > Communication Services: Mail, Fax, SMS, Telephony > Call Center Simulator
CategoryProgram error
PriorityCorrection with medium priority
TypeSAP Security Note
Version2
StatusReleased for Customer
Released on10.04.2012
LanguageEnglish

Description

Symptom

An attacker can discover information relating to SAP AS Java being used to deliver the BCB and CCS applications. This information could be used to allow the attacker to specialize their attacks against SAP AS Java and BCB and CCS applications.

Solution

Update to the latest Support Package. See the Support Package Patch section for details.

Reason and prerequisites

Information such as the component structure of SAP AS Java can be discovered using BCB and CCS applications. This information may be used by an attacker to further target SAP AS Java.

Affected components

  • SAP-JEE: 6.40
  • SAP_JTECHS: From 6.40 to 6.40, From 7.00 to 7.02

Full note on SAP: SAP Support Launchpad note 1601805

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

#Information Disclosure #Contact Center Simulator #CCS #Business Communication Broker #BCB #SAP AS Java

Explore More