SAP security note 1536982, "Security issues in generation of secure keys client code". Below are the symptom and SAP recommended solution.
Description
Symptom
Security issues in generation of secure keys client code.
Solution
The issue has been fixed. To get the corrections, please upgrade the client to at least the patch level specified in the "SP Patch Level" section of this note, as relevant to your release and SP.
Reason and prerequisites
The client code uses insecure means of generation of certain keys used by the client code. This allows a malicious user to predict the key value and create security threats using the to-be-generated key value.
References
Full note on SAP: SAP Support Launchpad note 1536982
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].