Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
(AV:N/AC:H/AU:N/C:P/I:N/A:NSAP)
Производитель ПО
Наименование ПО
SAP Notes
(1685106-2)
SAP Support Packages
(J2EE_ENGINE_CORE_TOOLS_700_SP026_000003, J2EE_ENGINE_CORE_TOOLS_700_SP027_000004, J2EE_ENGINE_CORE_TOOLS_700_SP028_000001, J2EE_ENGINE_CORE_TOOLS_700_SP029_000000, J2EE_ENGINE_CORE_TOOLS_700_SP999999_999999, J2EE_ENGINE_CORE_TOOLS_701_SP011_000004, J2EE_ENGINE_CORE_TOOLS_701_SP012_000005, J2EE_ENGINE_CORE_TOOLS_701_SP013_000000, J2EE_ENGINE_CORE_TOOLS_701_SP014_000000, J2EE_ENGINE_CORE_TOOLS_701_SP999999_999999, J2EE_ENGINE_CORE_TOOLS_702_SP010_000005, J2EE_ENGINE_CORE_TOOLS_702_SP011_000005, J2EE_ENGINE_CORE_TOOLS_702_SP012_000004, J2EE_ENGINE_CORE_TOOLS_702_SP013_000000, J2EE_ENGINE_CORE_TOOLS_702_SP014_000000, J2EE_ENGINE_CORE_TOOLS_702_SP999999_999999, JAVA_LOG_VIEWER_700_SP026_000001, JAVA_LOG_VIEWER_700_SP027_000001, JAVA_LOG_VIEWER_700_SP028_000001, JAVA_LOG_VIEWER_700_SP029_000000, JAVA_LOG_VIEWER_700_SP999999_999999, JAVA_LOG_VIEWER_701_SP011_000001, JAVA_LOG_VIEWER_701_SP012_000001, JAVA_LOG_VIEWER_701_SP013_000000, JAVA_LOG_VIEWER_701_SP014_000000, JAVA_LOG_VIEWER_701_SP999999_999999, JAVA_LOG_VIEWER_702_SP010_000002, JAVA_LOG_VIEWER_702_SP011_000002, JAVA_LOG_VIEWER_702_SP012_000001, JAVA_LOG_VIEWER_702_SP013_000000, JAVA_LOG_VIEWER_702_SP014_000000, JAVA_LOG_VIEWER_702_SP999999_999999, SAP_J2EE_ENGINE_640_SP029_000015, SAP_J2EE_ENGINE_640_SP030_000008, SAP_J2EE_ENGINE_640_SP031_000001, SAP_J2EE_ENGINE_640_SP999999_999999, SAP_TECH_S_700_OFFLINE_SP026_000007, SAP_TECH_S_700_OFFLINE_SP027_000005, SAP_TECH_S_700_OFFLINE_SP028_000001, SAP_TECH_S_700_OFFLINE_SP029_000000, SAP_TECH_S_700_OFFLINE_SP999999_999999, SAP_TECH_S_OFFLINE_701_SP011_000010, SAP_TECH_S_OFFLINE_701_SP012_000004, SAP_TECH_S_OFFLINE_701_SP013_000000, SAP_TECH_S_OFFLINE_701_SP014_000000, SAP_TECH_S_OFFLINE_701_SP999999_999999, SAP_TECH_S_OFFLINE_702_SP010_000012, SAP_TECH_S_OFFLINE_702_SP011_000010, SAP_TECH_S_OFFLINE_702_SP012_000003, SAP_TECH_S_OFFLINE_702_SP013_000000, SAP_TECH_S_OFFLINE_702_SP014_000000, SAP_TECH_S_OFFLINE_702_SP999999_999999)
Описание
Information such as the structure of AS Java components can be discovered using Standalone Log Viewer Server. This information might be used by an attacker to further target AS Java.
Как исправить
Update your AS Java, Standalone Log Viewer Server and Log Viewer Client to an SP or release where the issue is fixed. See the SP Patch Level section for details and available patches.
Ссылки
