Likely 0-day
Detected SAP systems where the SAP Start Service (sapstartsrv) SAPControl SOAP interface exposes the ListConfigFiles web method without authentication.
id: sap-listconfigfiles-disclosure
info:
name: SAPControl ListConfigFiles - Disclosure
author:
...