topic SAP Systems Security Vulnerables in Application Development and Automation Discussions

SAP Systems Security Vulnerables

Former Member — Tue, 26 Jun 2012 18:17:53 GMT

Recently I came across an article from the following link. Please check the link.

http://www.securityweek.com/vulnerable-sap-deployments-make-prime-attack-targets

Let say if any sap system is impacted with the above reasons mentioned in this article, what actions we have to take.

Thank you

Venkat

Re: SAP Systems Security Vulnerables

koehntopp — Tue, 26 Jun 2012 19:55:25 GMT

Well, it's mostly a combination of insecure setup and not implementing security patches.

The configuration is covered - at least for ABAP - in this excellent post

http://scn.sap.com/blogs/sro/2012/06/05/how-to-secure-your-sap-netweaver-abap

Then SAP has a monthly patch day where new security patches are announced. Go to

https://websmp210.sap-ag.de/securitynotes

to check for the latest security notes.

Frank.

Re: SAP Systems Security Vulnerables

Former Member — Wed, 27 Jun 2012 12:55:58 GMT

I agree with Frank, follow the guidelines and keep patched and you will be in a better position than most organisations running SAP (at least from external threats)