diff --git a/scripts/http-sap-netweaver-leak.nse b/scripts/http-sap-netweaver-leak.nse index fe4ecc8a6..cc8e785a3 100644 --- a/scripts/http-sap-netweaver-leak.nse +++ b/scripts/http-sap-netweaver-leak.nse @@ -9,7 +9,7 @@ description = [[ Detects SAP Netweaver Portal instances that allow anonymous access to the KM unit navigation page. This page leaks file names, ldap users, etc. -SAP Netweaber Portal with the Knowledge Management Unit enable allows unauthenticated +SAP Netweaver Portal with the Knowledge Management Unit enable allows unauthenticated users to list file system directories through the URL '/irj/go/km/navigation?Uri=/'. This issue has been reported and won't be fixed.