Skip to Content
0
Jun 10, 2018 at 01:34 AM

Sap metainf files in public domain

73 Views

While auditing sap erp of a company in India, I found that the parent directory of sap containing all files other than master or transaction data are available as a url link in a popular search engine. To see them no authorization is required. But to view the master or transaction data authorization requirement of authorization is still there. Please let me know the implications of the above with regard to the erp system of the company? Does this make the system volunerable to potential threats?