漏洞描述
Detected SAP systems where the SAP Start Service (sapstartsrv) SAPControl SOAP interface exposes the GetInstanceProperties method without requiring authentication.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
community.sap.comhttps://community.sap.com/t5/technology-blog-posts-by-members/securing-the-sap-instance-agent-sap-start-service/ba-p/13486679↗help.sap.comhttps://help.sap.com/docs/SUPPORT_CONTENT/si/3362958690.html↗help.sap.comhttps://help.sap.com/docs/SUPPORT_CONTENT/si/3362959700.html↗www.neteye-blog.comhttps://www.neteye-blog.com/2017/03/sap-monitoring-experiences-with-sapcontrol-and-check_sap_health/↗redrays.iohttps://redrays.io/blog/extended-security-settings-for-sapstartsrv-sap-security-note-1439348/↗