Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP AS JAVA
(SAP NetWeaver)
Описание
By default the J2EE Engine of a SAP NetWeaver 04s installation contains a set of active services, which are needed to run the J2EE Engine applications.
Due to security reasons customers have the requirement to disable unnecessary services and applications on production systems.
Приведенный список сервисов - только рекомендация. The actual services that are mandatory for you specific use case depend on the applications that you are using on the J2EE Engine. Therefore, to use this list on a productive system, you have to adjust the service classification according to the system functions that you require in your specific use case.
Due to security reasons customers have the requirement to disable unnecessary services and applications on production systems.
Приведенный список сервисов - только рекомендация. The actual services that are mandatory for you specific use case depend on the applications that you are using on the J2EE Engine. Therefore, to use this list on a productive system, you have to adjust the service classification according to the system functions that you require in your specific use case.
Как исправить
Отключите неиспользуемые сервисы
Ссылки
SAP Note 871394 - SAP NetWeaver04s:mandatory and optional J2EE Engine services
