Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1334907-5)
SAP Support Packages
(SAP_KERNEL_640_32_BIT_SP350_000350, SAP_KERNEL_640_32_BIT_SP999999_999999, SAP_KERNEL_640_32_BIT_UNICODE_SP350_000350, SAP_KERNEL_640_32_BIT_UNICODE_SP999999_999999, SAP_KERNEL_640_64_BIT_SP350_000350, SAP_KERNEL_640_64_BIT_SP999999_999999, SAP_KERNEL_640_64_BIT_UNICODE_SP350_000350, SAP_KERNEL_640_64_BIT_UNICODE_SP999999_999999, SAP_KERNEL_640_EX2_32_BIT_SP350_000350, SAP_KERNEL_640_EX2_32_BIT_SP999999_999999, SAP_KERNEL_640_EX2_32_BIT_UC_SP350_000350, SAP_KERNEL_640_EX2_32_BIT_UC_SP999999_999999, SAP_KERNEL_640_EX2_64_BIT_SP350_000350, SAP_KERNEL_640_EX2_64_BIT_SP999999_999999, SAP_KERNEL_640_EX2_64_BIT_UC_SP350_000350, SAP_KERNEL_640_EX2_64_BIT_UC_SP999999_999999, SAP_KERNEL_700_32_BIT_SP208_000208, SAP_KERNEL_700_32_BIT_SP999999_999999, SAP_KERNEL_700_32_BIT_UNICODE_SP208_000208, SAP_KERNEL_700_32_BIT_UNICODE_SP999999_999999, SAP_KERNEL_700_64_BIT_SP208_000208, SAP_KERNEL_700_64_BIT_SP999999_999999, SAP_KERNEL_700_64_BIT_UNICODE_SP208_000208, SAP_KERNEL_700_64_BIT_UNICODE_SP999999_999999, SAPKB62070, SAPKB64027, SAPKB70020)
Описание
Reason
-------
Setting the HTTPONLY attribute is not implemented in Releases 700, 640 and 620.
Prerequisites
---------------
Note the following: In addition to importing the current ABAP Support Package, you must also apply the current kernel patch. The corrections include changes to ABAP and the kernel.
For ABAP Release 620, you must use the current downward-compatible 640 kernel.
-------
Setting the HTTPONLY attribute is not implemented in Releases 700, 640 and 620.
Prerequisites
---------------
Note the following: In addition to importing the current ABAP Support Package, you must also apply the current kernel patch. The corrections include changes to ABAP and the kernel.
For ABAP Release 620, you must use the current downward-compatible 640 kernel.
Как исправить
Import the current SAP BASIS Support Package and the current kernel.
By setting the profile parameter "icf/set_HTTPonly_flag_on_cookies", you can activate the cookie attribute "HTTPONLY" for the ICF cookies, for example, for the MYSAPSSO2 cookie.
By setting the profile parameter "icf/set_HTTPonly_flag_on_cookies", you can activate the cookie attribute "HTTPONLY" for the ICF cookies, for example, for the MYSAPSSO2 cookie.
Ссылки
