SAP Note 1435655SAP Security NoteHigh priority
SAP security note 1435655, "Number of cryptographic bits increased in sap-contextid", is a program error note released on April 13, 2010. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
The SAP security standard regarding the key length for the sap-contextid was not adhered to by the Application Server (AS) ABAP.
Solution
The algorithm for creating the sap-contextid has been changed to a powerful cryptographic random number generator, and the length of the random value has been increased.
Reason and prerequisites
You are using AS ABAP.
References
Affected components
- SAP_BASIS: Version 720
Full note on SAP: SAP Support Launchpad note 1435655
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
