Knowledge Provider passes incorrect status of virus scan to the content server, SAP security note 2012284

SAP security note 2012284, “Knowledge Provider passes incorrect status of virus scan to the content server”, is a note. Below are the symptom, SAP recommended solution and the affected software components.

Description

Symptom

Content server does not perform a virus scan on objects created by Knowledge Provider.

Solution

Implement the Support Package or the attached correction instructions.

Reason and prerequisites

Both Knowledge Provider and content server are capable of performing the virus scan. To avoid scanning the same object twice, a synchronization mechanism was provided with SAP Note 1829993 and SAP Note 1820500. Under certain conditions the synchronization fails, and new objects are stored in content server without any virus scan.

CVSS

Score 6.2 Vector: AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L

References

• SAP Note 1829993 – Virus scan enhancement for new Content Server Interface

Affected components

• SAP_BASIS versions 700 to 750