Potential denial of service in Security Audit Log, SAP security note 1871683

SAP security note 1871683, “Potential denial of service in Security Audit Log”, is a note. Below are the symptom, SAP recommended solution and the affected software components.

Description

Symptom

An attacker can remotely exploit the Security Audit Log, rendering it and potentially the resources that are used to serve it unavailable. This can lead to a denial of service (DoS), impacting the availability of the system.

Solution

Implement the relevant support package:

• SAPKB62074
• SAPKB64032
• SAPKB70030
• SAPKB70115
• SAPKB70214
• SAPKB71018
• SAPKB71113
• SAPKB72008
• SAPKB73010
• SAPKB73109
• SAPKB74004

CVSS

Score 6.1 Vector: AV:N/AC:H/AU:S/C:P/I:P/A:C

Affected components

• SAP_BASIS 620 to 640
• SAP_BASIS 700 to 702
• SAP_BASIS 710 to 731
• SAP_BASIS 740