SAP Knowledge Base Article - Preview

3103467 - Request Rate Limiting Not Implemented (Web Services) - FC

Symptom

  • Requests made to the web service endpoints did not show evidence of rate limiting.
  • Rate limiting prevents an attacker from exhausting hosted resources for the endpoint server, which could in some circumstances lead to a denial of service condition.
  • Can this be considered as a product vulnerability?


Read more...

Environment

SAP Financial Consolidation (FC) Web client .

Product

SAP Financial Consolidation 10.1

Keywords

web.config , bfc , vulnérabilité , thread , IIS, Rate, Limiting, website , KBA , EPM-BFC-PSI-INS , Installation, Upgrade, Migration , How To

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.