SAP security note 1897192, "Password hash algorithm in UME", is a note. Below are the SAP recommended solution and the affected software components.
Description
Solution
Update your AS Java to an SP or release in which the issue is fixed. See the "SP Patch Level" tab for details and available patches.
Reason and prerequisites
The UME hash algorithm for passwords has been updated.
CVSS
Score 1.4 Vector: AV:A/AC:H/AU:S/C:P/I:N/A:N
Affected components
- SAP-JEECOR (7.00 to 7.00)
- SAP-JEECOR (7.01 to 7.02)
- SERVERCORE (7.10 to 7.10)
- SERVERCORE (7.11 to 7.11)
- SERVERCORE (7.20 to 7.20)
- SERVERCORE (7.30 to 7.30)
- SERVERCORE (7.31 to 7.31)
- SERVERCORE (7.40 to 7.40)
Full note on SAP: SAP Support Launchpad note 1897192
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
