Skip links
Picture of Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

Potential information disclosure relating to BC-XI-IS-IEN, SAP security note 2055083

SAP Note 2055083
Medium priority

SAP security note 2055083, “Potential information disclosure relating to BC-XI-IS-IEN”, is a note released on 15.05.2015. Below are the symptom, SAP recommended solution and the affected software components.

ComponentBasis Components > NetWeaver Process Integration (PI) > Integration Server > Integration Engine
PriorityCorrection with medium priority
StatusReleased for Customer
Released on15.05.2015

Description

Symptom

An attacker can discover information relating to BC-XI-IS-IEN.

Solution

Please apply the referred support package or follow the attached correction instructions.

Reason and prerequisites

Information such as the landscape configuration, user details, or passwords can be discovered using BC-XI-IS-IEN. This information may be used by an attacker.

CVSS

Score 0

Affected components

  • SAP_BASIS: 700 to 702
  • SAP_BASIS: 710 to 711
  • SAP_BASIS: 730
  • SAP_BASIS: 731
  • SAP_BASIS: 740

Full note on SAP: SAP Support Launchpad note 2055083

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

Explore More