Description
Load balancer reveals backend server information by exposing the server instance IDs as part of session information.
Available fix and Supported packages
- SAP_BASIS | 710 | 711
- SAP KERNEL 7.10 32-BIT | SP189 | 000189
- SAP KERNEL 7.10 32-BIT UNICODE | SP189 | 000189
- SAP KERNEL 7.10 64-BIT | SP189 | 000189
- SAP KERNEL 7.10 64-BIT UNICODE | SP189 | 000189
- SAP KERNEL 7.11 32-BIT | SP076 | 000076
- SAP KERNEL 7.11 32-BIT UNICODE | SP076 | 000076
- SAP KERNEL 7.11 64-BIT | SP076 | 000076
- SAP KERNEL 7.11 64-BIT UNICODE | SP076 | 000076
Affected component
- BC-CST
Client/Server Technology
CVSS
Score: 0
PoC
Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.
URL
https://launchpad.support.sap.com/#/notes/1440345
