Medium priority
SAP security note 1587785, "Update #1 to Security Note 1501919", is a documentation error note released on May 13, 2011. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
The solution for vulnerability (Secure Access to Admin area) provided with Security Note 1501919 is additionally applicable for the following SP Patch Levels:
- CRM JAVA APPLICATIONS 7.0: SP008 Patch Level 0
- CRM JAVA COMPONENTS 7.0: SP008 Patch Level 0
- CRM JAVA WEB COMPONENTS 7.0: SP008 Patch Level 0
- SAP SHARED JAVA APPLIC. 7.0: SP008 Patch Level 0
- SAP SHARED JAVA COMPONENTS 7.0: SP008 Patch Level 0
- SAP SHARED WEB COMPONENTS 7.0: SP008 Patch Level 0
Solution
This note contains Java corrections for E-Commerce and CRM Web Channel.
- Software component: SAP-SHRWEB
- Development components: crm/tc/web/xcmadmin
- Changed files: start.jsp
Apply the Support Package patch level specified in this note.
For more information about applying Java patches, refer to Note 877887. See Note 1546959 for information about the patch strategy.
Reason and prerequisites
Additional solutions for further SP Patch Levels should be added to Security Note 1501919.
References
This note refers to
Affected components
- SAP-CRMJAV: 700 to 700
- SAP-CRMWEB: 700 to 700
- SAP-SHRWEB: 700 to 700
- SAP-SHRJAV: 700 to 700
- SAP-CRMAPP: 700 to 700
- SAP-SHRAPP: 7.0 to 7.0
Full note on SAP: SAP Support Launchpad note 1587785
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
