Skip links
Picture of Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

Update #1 to Security Note 1501919, SAP security note 1587785

SAP Note 1587785
Medium priority

SAP security note 1587785, "Update #1 to Security Note 1501919", is a documentation error note released on May 13, 2011. Below are the symptom, SAP recommended solution and the affected software components.

ComponentCustomer Relationship Management > Internet Sales > Technical Infrastructure
CategoryDocumentation error
PriorityCorrection with medium priority
StatusReleased for Customer
Released onMay 13, 2011

Description

Symptom

The solution for vulnerability (Secure Access to Admin area) provided with Security Note 1501919 is additionally applicable for the following SP Patch Levels:

  • CRM JAVA APPLICATIONS 7.0: SP008 Patch Level 0
  • CRM JAVA COMPONENTS 7.0: SP008 Patch Level 0
  • CRM JAVA WEB COMPONENTS 7.0: SP008 Patch Level 0
  • SAP SHARED JAVA APPLIC. 7.0: SP008 Patch Level 0
  • SAP SHARED JAVA COMPONENTS 7.0: SP008 Patch Level 0
  • SAP SHARED WEB COMPONENTS 7.0: SP008 Patch Level 0

Solution

This note contains Java corrections for E-Commerce and CRM Web Channel.

  • Software component: SAP-SHRWEB
  • Development components: crm/tc/web/xcmadmin
  • Changed files: start.jsp

Apply the Support Package patch level specified in this note.

For more information about applying Java patches, refer to Note 877887. See Note 1546959 for information about the patch strategy.

Reason and prerequisites

Additional solutions for further SP Patch Levels should be added to Security Note 1501919.

References

Affected components

  • SAP-CRMJAV: 700 to 700
  • SAP-CRMWEB: 700 to 700
  • SAP-SHRWEB: 700 to 700
  • SAP-SHRJAV: 700 to 700
  • SAP-CRMAPP: 700 to 700
  • SAP-SHRAPP: 7.0 to 7.0

Full note on SAP: SAP Support Launchpad note 1587785

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

Explore More