Skip links
RedRays - Your SAP Security Solution
Picture of Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

SAP Security on Udemy

replace JCo640 usage, SAP security note 1440983

SAP Note 1440983
SAP Security Note
High priority

SAP security note 1440983, "replace JCo640 usage", was released on 13.09.2011. Below are the symptom and SAP recommended solution.

ComponentBasis Components > NetWeaver Process Integration (PI) > Connectivity > Java Proxy Runtime (BC-XI-CON-JPR)
PriorityCorrection with high priority
TypeSAP Security Note
Version4
StatusReleased for Customer
Released on13.09.2011

Description

Symptom

The usage of the old JCo API is no longer supported due to issues described in SAP Note 950134.

Solution

In PI 7.30, the code has been changed to replace the usage of the singleton resource pool manager with a new instance of the pool manager for each application. To resolve this issue:

  1. Check the Support Package/Policy Level information.
  2. Apply the relevant patch available here or download the PDF version here.

Reason and prerequisites

The old JCo API is deprecated and unsupported. For more information, refer to SAP Note 1077727.

References

Full note on SAP: SAP Support Launchpad note 1440983

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

#Java Proxy Runtime#BC-XI-CON-JPR#JCo#NetWeaver PI

Explore More