Description
The Java Server Pages in the Software Lifecycle Manager (SLM) in SAP NetWeaver allows remote attackers to obtain sensitive information via a crafted request, related to SAP Solution Manager 7.1.
References
- http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-005
- 67147 vdb-entry
- 1030157 vdb-entry
- 20140428 [Onapsis Security Advisory 2014-005] Information disclosure in SAP Software Lifeclycle Manager mailing-list
- http://scn.sap.com/docs/DOC-8218
- https://service.sap.com/sap/support/notes/1894049