SAP security note 1573173, “Potential disclosure of server related information”, is a note released on 09.04.2013. Below are the symptom and SAP recommended solution.
Description
Symptom
An attacker can discover information relating to AS Java by using Web Container or Http service. This information could be used to allow the attacker to specialize their attacks against AS Java.
Solution
Update AS Java to the latest version. See the SP Patch Level section for details.
Reason and prerequisites
Information such as the installed products and their version can be discovered through the use of the Web Container or the Http service. This information may be used by an attacker to further target AS Java.
CVSS
Score 5.0 Vector: AV:N/AC:L/AU:N/C:P/I:N/A:N
Full note on SAP: SAP Support Launchpad note 1573173
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].