SAP Note 1578579
SAP security note 1578579, "Incorrect authorization check in File Adapter", is a note. Below are the symptom and SAP recommended solution.
Description
Symptom
File adapter incorrectly accepts SSL Connection.
Solution
Kindly apply the relevant patch as specified in the SP/Patch Level information.
Reason and prerequisites
File adapter authentication incorrectly accepts SSL connection without proper validation of server certificate. This may result in undesired system behavior.
References
- 1749751 – Message processing fails with SSLException after SP upgrade
- 1631887 – ESR, SR, UDDI, MESSAGING related changes in 7.11 SP08
- 1631886 – ESR, MESSAGING, SR, UDDI related changes in 7.10 SP13
- 1611296 – SAP EhP2 for NetWeaver 7.00 SP09
- 1608134 – SAP EhP1 for XI on Netweaver 7.00 SP10
- 1603564 – NW04s XI Support Package Stack 25
Full note on SAP: SAP Support Launchpad note 1578579
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
