漏洞描述
Detected SAP systems where the SAP Start Service (sapstartsrv) SAPControl SOAP interface exposes the ReadDeveloperTrace web method without authentication.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
github.comhttps://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/sap/sap_mgmt_con_getlogfiles.rb↗itsiti.comhttps://itsiti.com/csmon/↗sapbasisinfo.comhttps://sapbasisinfo.com/blog/2017/01/20/sapcontrol-command-funtions-for-sap-hana/↗help.sap.comhttps://help.sap.com/docs/SUPPORT_CONTENT/si/3362959700.html↗