SAP Knowledge Base Article - Preview

3757519 - Race condition finding in message maintenance due to missing rate limiting and concurrency controls

Symptom

  • Race condition identified in the Message Maintenance module during an application security scan.
  • Increasing the number of parallel requests returns successful responses repeatedly.


Read more...

Environment

  • SAP NetWeaver Application Server for Java
  • SAP Netweaver Enterprise Portal
  • Knowledge Managment

Product

SAP NetWeaver Application Server for Java all versions

Keywords

race condition, message maintenance, content management, km-cm, portal, concurrency control, rate limiting, request throttling, parallel requests, replay, status update, dos prevention, locking, optimistic concurrency, web dispatcher, icm, waf , KBA , EP-KM-CM , Content Management , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.