SAP security note 1867507, “Potential information disclosure relating to AS Java”, is a program error note released on 08.07.2014. Below is the security information published by SAP for this note.
Description
Symptom
An attacker can discover information related to AS Java by using the Web Container or HTTP service. This information could be used to allow the attacker to specialize their attacks against AS Java.
Reason and prerequisites
Information such as the installed products and their versions can be discovered through the use of the Web Container or the HTTP service. This information may be used by an attacker to further target AS Java.
Solution
Update AS Java to the latest version. See the SP Patch Level section for details.
Full note on SAP: SAP Support Launchpad note 1867507
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].