Stack trace of exceptions is removed from the output, SAP security note 665032

SAP security note 665032, “Stack trace of exceptions is removed from the output”, is a note. Below are the symptom, reason and prerequisites, SAP recommended solution, affected software component and references.

Description

Symptom

Stack trace of exceptions is visible when an error occurs.

Solution

When an exception is raised, an error message appears with an exception ID. Detailed information about the exception can be found in the log files using the exception ID.

The issue is resolved in:

• EP5 SP5 Patch 2
• EP5 SP6 Hotfix 1

Reason and prerequisites

This is a security hole because the class which throws the exception is visible.

References

• Patch 1 for Support Package 6 for Enterprise Portal 5.0
• Central Note for EP 5.0 SP 5 Patch 3 Hotfixes

Affected components

• EP-PIN-PRT (Enterprise Portal > SAP Enterprise Portal (On Premise) > Portal Runtime)