Detail
SAP Internet Communication Framework (ICF) is enabled and the info service can be accessed anonymously through the /sap/public/info URL. This service leaks sensitive information about the SAP platform, such as operating system version, SAP version, IP address and other information.
Solution Advice
It's recommended to restrict access to the ICF service (if not used inside the organization). The ICF service can be deactivated using the SICF transaction.
Get AI-powered remediation steps tailored to your asset.
Try AI Solutions →