Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1363631-5)
SAP Support Packages
(SAPKA64028, SAPKA70020, SAPKA70105, SAPKA70202, SAPKA71009, SAPKA71104)
Описание
The problem occurs only if the Authorization role does not contain the object B_BUPA_GRP at all.
The code for filtering the BP's from the search results checked on the object B_BUPA_GRP in order to apply the authorization. In case this object itself is missing from the role, the BADI implementation BUPA_F4_AUGRP did not filter the BP.
The code for filtering the BP's from the search results checked on the object B_BUPA_GRP in order to apply the authorization. In case this object itself is missing from the role, the BADI implementation BUPA_F4_AUGRP did not filter the BP.
Как исправить
Please implement this solution to resolve the issue.
Ссылки
