Description
SAP Internet Communication Framework (ICF) is enabled and the info service can be accessed anonymously through the /sap/public/info URL. This service leaks sensitive information about the SAP platform, such as operating system version, SAP version, IP address and other information.
Remediation
It's recommended to restrict access to the ICF service (if not used inside the organization). The ICF service can be deactivated using the SICF transaction.
References
Related Vulnerabilities
WordPress Plugin Wholesale Market for WooCommerce Arbitrary File Download (1.0.7)
Web Cache Poisoning via semicolon query separator
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-0701)
WordPress Plugin Advanced Custom Fields PRO Information Disclosure (6.0.2)
WordPress Plugin Jetpack-WP Security, Backup, Speed, & Growth Information Disclosure (9.7.1)