/support/notes/service/sap_logo.png){kind=logo}
SAP Knowledge Base Article - PreviewSymptom
When tracing basic authentication with username and password to any Java application, such as the Portal or NetWeaver Administrator, the j_username and j_password parameters along with their values are found exposed in the traces. Example: j_username=myAdministrator&j_password=myPassword.
Read more...
Environment
SAP NetWeaver Application Server for Java
Product
SAP NetWeaver Application Server for Java all versions
Keywords
security, risk, disclosure, information , KBA , BC-JAS-SEC-LGN , Logon, SSO , Problem
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.
/support/notes/service/twitter.svg)
/support/notes/service/youtube.svg)
/support/notes/service/linkedin.svg)
/support/notes/service/instagram2.svg)