SAP Note 2003727
SAP security note 2003727, "Password Hash Algorithm in UME". Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
The system is using an obsolete hash algorithm for passwords in UME.
Solution
Update your AS Java to a Support Package (SP) or release in which the issue is fixed. See the SP Patch Level section for details and available patches.
Reason and prerequisites
The UME hash algorithm for passwords has been improved.
Side effects
This note causes the following side effect: Performance Regression Caused by Note 2003727.
Affected components
- SAP-JEE 7.00 – 7.02
- SAP-JEECOR 7.00
- SAP-JEECOR 7.01 – 7.02
- SERVERCORE 7.10
- SERVERCORE 7.11
- SERVERCORE 7.20
- SERVERCORE 7.30
- SERVERCORE 7.31
- SERVERCORE 7.40
Full note on SAP: SAP Support Launchpad note 2003727
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].