漏洞描述
Detected SAP systems where the SAP Start Service (sapstartsrv) SAPControl SOAP interface exposes the GetVersionInfo web method without authentication.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
github.comhttps://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/sap/sap_mgmt_con_version.rb↗gist.github.comhttps://gist.github.com/c6da760f57e062397e52400936ca5797↗www.neteye-blog.comhttps://www.neteye-blog.com/2017/03/sap-monitoring-experiences-with-sapcontrol-and-check_sap_health/↗