![]() Nevertheless, which WebView2 version is needed for which NWBC can be found in SAP Note 3054060. It is rolled out in the so-called Evergreen Runtime distribution mode where the Microsoft Edge Update Service takes care about the updates of WebView2. Microsoft announced that WebView2 will be automatically deployed as of Januar 2023 to all Windand higher (). See SAP Note 2928874 and announcement blogpost. Uninstall “Chromium for SAP Business Client 7.70”, after switching to Edge WebView2Īs of PL 0 support for MS Edge (more specific Edge WebView2) is built-in in “SAP Business Client 7.70”. Hint #3: If the “Chromium for SAP Business Client 7.70” is not installed, also ‘Edge’ (more specific Edge WebView2) can be used as “SAP Business Client 7.70” has built-in support as of PL0. Hint #2: After “Chromium for SAP Business Client 7.70” is deinstalled, the default setting for the browser-control is “Internet Explorer”. Hint #1: If the default setting for the browser-control was not changed, most likely “Internet Explorer” is used. This means, de-select this additional component in the installer during installation time. If the chromium browser-control is not used, do not distribute the “Chromium for SAP Business Client 7.70” package. Recommendations Uninstall “Chromium for SAP Business Client 7.70”, if it is not used ![]() Please note: As of the documentation ( SAP Help Portal), it is not possible to enforce the chromium browser-control for specific URLs via the Dynamic Browser Control Selection File.Įven if the chromium browser control is not used, it has to be patched as otherwise vulnerable software will reside on the client. The configuration can be defined as recommended settings the user can change or as non-changeable setting. While the default browser-control for NWBC770 is still ‘Internet Explorer’ (leveraging the MSHTML engine which is still part of Windows), it can optionally be switched to ‘Chromium’ if the package “Chromium for SAP Business Client 7.70” is installed.įor this, the Primary Browser-Control has to be set to ‘Chromium’ in the NWBC settings either by the user or by the admin.įor the settings to be specified by the admin, the NwbcOptions.xml containing a section for ‘’ has to be rolled out. ![]() When does the NWBC770 use “Chromium for SAP Business Client 7.70”? The additional package “Chromium for SAP Business Client 7.70” is selected by default and therefore will be most likely installed on all clients which are running “SAP Business Client 7.70”. In contrast to SAP Business Client 7.70, both examples come with their own Update Service which takes care about updating the software in a timely manner. Other examples for such proprietary software are the browsers Google Chrome or Microsoft Edge. Whenever chromium receives a security fix, all products based on a vulnerable version of chromium need to be rebuilt based on the fixed version. The additional package “Chromium for SAP Business Client 7.70” delivered with the “SAP Business Client 7.70” is based on the open source software chromium. ![]() This SAP Security Note may affect your installation of the “SAP Business Client 7.70” aka NWBC (NWBC770). The note is rated with the highest CVSS rating of all listed vulnerabilities. It is classified as Very High (CVSS 10.0) as it lists all known vulnerabilities in the “Chromium for SAP Business Client 7.70”. The SAP Note 2622660 – ‘Security updates for the browser control Google Chromium delivered with SAP Business Client’ shows up in many SAP Security Patch Days. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |