SAP security note 1985340, "Potential information disclosure relating to NW AS Java", is a note. Below are the symptom and SAP recommended solution.
Description
Symptom
This security note has been updated. For more detailed information, see Security Note 2189127.
An attacker can discover information related to NW AS Java when using Java System Properties. This information could be used to allow the attacker to specialize their attacks against NW AS Java.
Solution
Apply the respective patches according to the "Validity" and "SP Patch Level" sections in this note.
Reason and prerequisites
Information such as user passwords can be discovered using Java System Properties. This information may be used by an attacker to further target NW AS Java.
CVSS
Score 3.5 Vector: AV:N/AC:M/Au:S/C:P/I:N/A:N
Full note on SAP: SAP Support Launchpad note 1985340
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].