SAP Security Blog
Browsing Category
See here for keeping SAP HANA secure: https://help.sap.com/viewer/742945a940f240f4a2a0e39f93d3e2d4/2.0.04/en-US/54ef197af0e442fe80c8ef387dd83939.html SAP Note 1969700 – SQL Statement Collection for SAP HANA, see script HANA_Security_MiniChecks_2.00.030+.txt in SQLStatements.zip attached to that SAP Note
SAP Note 2808158 – [CVE-2019-0330] OS Command Injection vulnerability in SAP Diagnostics Agent SAP Note 2823733 – Update 1 to Security Note 2808158: [CVE-2019-0330] OS Command Injection vulnerability in SAP Diagnostics Agent SAP Note – [CVE-2019-0355]Code Injection vulnerability in SAP NetWeaver AS for Java(Web Container)
SAP Note 2812427 – Timeout or connection failure in SAP process after SLES Linux kernel update For additional information please refer to this SUSE knowledge base article: Application suffers an unexpected timeout with specific kernel versions.
SAP Note 2787227 – Solution Manager 7.2 FP Stack 09: recommended corrections There is a strict relationship with SolMan SP9 and ST-OST. You need to wait until SP4 is released. This is planned for mid of August: https://blogs.sap.com/2019/07/02/for-your-convenience-sps09-available-for-sap-solution-manager-7.2/ SAP Note 394616 – Release strategy for SAP Solution Manager
Use cl_thtmlb_util=>get_current_skin( ) to return current CRM WebUI skin. CL_THTMLB_CONTENT-> IF_BSP_ELEMENT~DO_AT_BEGINNING ( ) – to render HTML for skin. if you put an external breakpoint in CL_CRM_BSP__RECENTOBJECT0_IMPL-> IF_CRM_WEB_CALLBACK~HANDLE_REQUEST( ), you’d simplify the debugging process: https://blogs.sap.com/2015/12/02/what-is-uifcallback-doing/ SAP Note 2039218 – SAPUI5 integration in WEBCUIF Report CRM_IC_CHECK_CUSTOMIZING (see SAP Note 2161288) helps analyzing customizing of specific IC …
https://blogs.sap.com/2020/11/13/sap-secure-login-server-your-own-ca-on-hand-…/ SAP Note 2636840 – Secure Login Client SPNEGO Profile – “Supplied credentials not accepted by the server.” The errors imply there is an issue with the Active Directory service account. Check the Service Principal Name (SPN) and the password. Tips for this: – Check the SPN by running the command “setspn -Q HTTP/<SAP Secure Login …
Microsoft Lifecycle Policy: https://support.microsoft.com/en-us/lifecycle?C2=1044
Custom reports reading one of the following tables will not work after the update of the LIS tables is switched off: S021: Order item data for material S022: Operation data for work center S023: Totals for material S024: Totals for work center S025: Run Schedule S026: Material usage S028: Reporting point statistics S094: Stock/Requirements Analysis …
Deprecated parameters (these parameters still exist in 773 but are not recommended): wdisp/group_info_location, wdisp/J2EE/group_info_location, wdisp/server_info_location, wdisp/url_map_location, wdisp/J2EE/url_map_location wdisp/system_conflict_resolution=ROUND_ROBIN wdisp/ssl_auth=2 and wdisp/ssl_cred wdisp/permission_table Changed parameters (these parameters still exist in 773 but their default values have been changed): icm/server_port subparameter PROCTIMEOUT Default value increased from 60 to 600 (seconds) to allow longer processing time of HTTP requests. …
SAP Note 2523956 – SAP HANA Web Dispatcher HTTPS does not work SAP Note 700659 – Security Guide: mySAP Supply Chain Management Configuring SAP Web Dispatcher for TLS Testing SSL parameters in ABAP NetWeaver AS 10 Online Tool to Test SSL, TLS and Latest Vulnerability