SAP Knowledge Base Article - Preview

2191024 - ProductAuthority Error Report discloses details of Admin Console menu item and name of servlet configuration variable.

Symptom

When testing the application for security vulnerabilities a sensitive data exposure message is received in our monitoring tool. It informs us that the ProductAuthority Error Report is providing details of the location of an Admin Console menu item location and the name of a servlet configuration variable.


Read more...

Environment

  • Camilion Product Lifecycle 2.0
  • Camilion Product Lifecycle 2.1
  • Camilion Lifecycle Manager 2.0
  • Camilion Lifecycle Manager 2.1
  • SAP Product Lifecycle Management for Insurance 6.2
  • SAP Product Lifecycle Management for Insurance 7.0
  • SAP Product Lifecycle Management for Insurance 7.1
  • SAP Product Lifecycle Management for Insurance 7.2
  • SAP Product Lifecycle Management for Insurance 7.3
  • Camilion ProductAuthority 6.2
  • Camilion ProductAuthority 7.0
  • Camilion ProductAuthority 7.1
  • Camilion ProductAuthority 7.2
  • Camilion ProductAuthority 7.3
  • Camilion Policy Authority 3.0
  • Camilion Authority Suite 3.0
  • SAP Underwriting for Insurance 5.1
  • SAP Underwriting for Insurance 5.2
  • Camilion Authority Suite 5.1
  • Camilion Authority Suite 5.2

Product

AUTHORITY SUITE 4.0 ; Camilion Policy Authority 3.0 ; Camilion Product Authority 4.3 ; Camilion Product Authority 6.2 ; Camilion Product Lifecycle 2.0 ; Camilion Product Lifecycle 2.1 ; SAP Circular Authority for Insurance 5.1 ; SAP Circular Authority for Insurance 5.2 ; SAP Product Lifecycle Management for Insurance 7.0 ; SAP Product Lifecycle Management for Insurance 7.1 ; SAP Product Lifecycle Management for Insurance 7.2 ; SAP Product Lifecycle Management for Insurance 7.3

Keywords

Configurator, PC, Author, Authoring, Designer, Authority Suite, Policy Authority, LifeCycleManager, LCM , KBA , FS-PRO , Product Management Insurance , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP ONE Support launchpad (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.