Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
(AV:N/AC:L/AU:S/C:C/I:N/A:NSAP)
Производитель ПО
Наименование ПО
SAP Notes
(1879601-2)
Описание
The standalone enqueue server is an infrastructure component of the SAP system and provides the enqueue function to the SAP system (AS ABAP or AS JAVA). For this purpose, it opens a network port to which network clients can connect.The following clients have to be able to connect to this port:- ABAP work processes- Java worker nodes- Enqueue replication serverAll these clients are server components that work in the server network.
Как исправить
SAP recommends that you protect the server network with a firewall and to prevent access to the standalone enqueue server from the outside. Also see the guide for "Secure Configuration of SAP NetWeaver® Application Server Using ABAP" on SCN http://scn.sap.com/docs/DOC-17149the secure operation of the standalone enqueue server without a firewall requires the configuration of access control lists (ACL). Refer to Note 1495075.
Ссылки
