Skip links
RedRays - Your SAP Security Solution
Picture of Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

SAP Security on Udemy

Upgrade SSL support to TLSv1.2, SAP security note 2504979

SAP Note 2504979
SAP Security Note
Medium priority

SAP security note 2504979, "Upgrade SSL support to TLSv1.2", is a program error note released on 10.12.2019. Below are the symptom and SAP recommended solution.

ComponentSAP NetWeaver Master Data Management > Master Data Management Foundation > Master Data Server > Security
CategoryProgram error
PriorityMedium priority
TypeSAP Security Note
Version5
StatusReleased for Customer
Released on10.12.2019
LanguageEnglish

Description

Symptom

Until SP19, MDM supported SSLv3, which was vulnerable to various security issues like the POODLE attack.

Solution

From SP19, MDM supports TLSv1.2 with no option for fallback to SSL. Hence, upgrade to MDM 7.1 SP19 or higher.

  • Java API: use JDK 7 or above.
  • .NET API: use .NET 4.5 or above.
  • WebDynpro or iViews: please follow note 2506562.

CVSS

Score 6.4 Vector: CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

References

Full note on SAP: SAP Support Launchpad note 2504979

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

#SSL #TLSv1.2 #POODLE #cipher

Explore More