SAP Security Note
High priority
SAP security note 1439392, "Java applet is not displayed", is a note released on April 19, 2011. Below are the symptom and SAP recommended solution.
Description
Symptom
Increasing the security settings of your system results in the system no longer displaying the Gantt and the Network control in Web Dynpro ABAP.
This security note has been updated. For more detailed information, refer to Security Note 1556712.
Solution
Implement the correction instructions provided in this note or import the relevant Support Package. Prerequisite: SAP Note 1420203 must be implemented in your system beforehand.
Reason and prerequisites
This issue is caused by a program error.
References
- SAP Note 1071889 – File name extension duplicated when saving
- SAP Note 1420203 – Enable foreign access to a stateful HTTP session
- SAP Note 1436936 – Unauthorized changes can be made to Web Dynpro ABAP session
- New ICF handler for JNet in cProjects (SAP Note 1529208)
- icf/set_HTTPonly_flag_on_cookies: Influence on JNet/JGantt (SAP Note 1452876)
Full note on SAP: SAP Support Launchpad note 1439392
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
