SAP Systems Security Vulnerables

[Former Member]

Recently I came across an article from the following link. Please check the link.

http://www.securityweek.com/vulnerable-sap-deployments-make-prime-attack-targets

Let say if any sap system is impacted with the above reasons mentioned in this article, what actions we have to take.

Thank you

Venkat

[koehntopp]

Well, it's mostly a combination of insecure setup and not implementing security patches.

The configuration is covered - at least for ABAP - in this excellent post

http://scn.sap.com/blogs/sro/2012/06/05/how-to-secure-your-sap-netweaver-abap

Then SAP has a monthly patch day where new security patches are announced. Go to

https://websmp210.sap-ag.de/securitynotes

to check for the latest security notes.

Frank.

[Former Member]

I agree with Frank, follow the guidelines and keep patched and you will be in a better position than most organisations running SAP (at least from external threats)