SAP security note 1865109, “Potential information disclosure in Diagnostics Agents”. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
An attacker can discover information related to credentials used for connecting to Solution Manager. This information could be leveraged to specialize attacks against Solution Manager, potentially leading to unauthorized access or privilege escalation.
Solution
The implementation introduced in this security note allows the use of a non-elevated role for Diagnostics Agent connections. This new role has no privileges, ensuring that an attacker cannot use it to perform critical actions on the Solution Manager system.
Reason and prerequisites
Connections of Diagnostics Agents to Solution Manager require an elevated role to be established in a trusted manner. If compromised, this role could be exploited to target Solution Manager and obtain unexpected privileges.
CVSS
Score 6.0 Vector: AV:N/AC:M/AU:S/C:P/I:P/A:P
Affected components
- LM-SERVICE version 7.10 to 7.10
Full note on SAP: SAP Support Launchpad note 1865109
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
