SAP security note 1513182 is titled "Potential information disclosure relating to server info". Below are the symptom and SAP recommended solution.
Description
Symptom
A malicious user can discover information relating to server information. This information could be used to specialize attacks against portal applications.
Exposing server information increases the risk of targeted attacks on portal applications, potentially leading to unauthorized access or further exploitation of vulnerabilities within the system.
Solution
To address this security issue, review the appropriate Service Pack (SP) Patchlevel under the "SP Patchlevel" section within this security note. Applying the recommended patches will mitigate the risk of information disclosure.
Reason and prerequisites
Information such as the landscape configuration can be discovered through the use of the SOAP framework. This information can potentially be used by malicious users to further target portal applications.
Full note on SAP: SAP Support Launchpad note 1513182
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].