SAP security note 1773160, "Update 1 to security note 1669031", is a program error note released on 12.10.2012. Below are the symptom and SAP recommended solution.
Description
Symptom
Security note 1669031 has been rereleased due to added correction instructions. Correction instructions have been added for the following releases:
- SAP BASIS 640
Solution
Use transaction SICF to manually delete the following ICF services:
- /default_host/sap/public/bc/its/mobile/test
- /default_host/sap/public/bc/its/mobile/start
Implement the correction instructions.
Reason and prerequisites
Correction instructions are missing in security note 1669031.
Full note on SAP: SAP Support Launchpad note 1773160
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
