1877320 - Enable/disable directory (file system) listing on SAP NetWeaver AS Java

The aim of this document is to specify the options system administrators have to enable/disable directory browsing or listing on SAP Netweaver application server java release 7.1 and higher.

NOTE: This option should be enabled after considerable consideration from a security perspective as it can be used for exposing sensitive data.

It is not recommended to do this on productive environments. Aliases that you maintain should point to only those file directories that are actually needed for monitoring and not to root catalogues / directories that can potentially contain sensitive information.

There is no user based authorization for this feature, so should be enabled keeping in mind the security risks.

For a similar document on checking the configured Application Aliases, check SAP KBA 2586026 .

Read more...

• SAP NetWeaver AS Java

SAP NetWeaver 7.3 ; SAP NetWeaver 7.4 ; SAP NetWeaver Application Server for Java all versions ; SAP NetWeaver Composition Environment 7.1 ; SAP NetWeaver Composition Environment 7.2 ; SAP Process Integration all versions ; SAP enhancement package 1 for SAP NetWeaver 7.3 ; SAP enhancement package 1 for SAP NetWeaver Composition Environment 7.1

AL11 J2EE server, filesystem J2EE, Application server JAVA,531495 Configuration virtual hosts Directory List host -enable dirList host -disable dirList ,SAP Production ABAP R/3 ERP SRM CRM ERP PPM SEM APO XI PI PORTAL Test development QA, , KBA , kde , BC-JAS-COR , Enterprise Runtime, Core J2EE Framework , How To