SAP Security Note
Medium priority
SAP security note 2375140, "Update 1 to Security Note 2344524", is a program error note released on December 13, 2016. Below are the symptom and SAP recommended solution.
Description
Symptom
This SAP Note supplements the corrections provided in security note 2344524. Additional corrections are provided in the following Support Package patch levels: GUIDED PROCEDURES CORE 7.50 SP002.
Solution
To correct this problem, apply the patch matching your support package version as listed in the Support Packages & Patches table below as per the instructions in the SAP NetWeaver Support Package Stack Guide.
Reason and prerequisites
The correction instructions from security note 2344524 must be supplemented.
References
Full note on SAP: SAP Support Launchpad note 2375140
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
