Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Support Packages
(SAPKB70110, SAPKB70111, SAPKB70112, SAPKB70113, SAPKB70114, SAPKB70115, SAPKB70116, SAPKB70117, SAPKB70118, SAPKB70119, SAPKB70120, SAPKB70121, SAPKB70122, SAPKB70123, SAPKB7014, SAPKB7015, SAPKB7016, SAPKB7017, SAPKB7018, SAPKB7019, SAPKB71110, SAPKB71111, SAPKB71112, SAPKB71113, SAPKB71114, SAPKB71115, SAPKB71116, SAPKB71117, SAPKB71118, SAPKB71119, SAPKB71120, SAPKB71121, SAPKB71122, SAPKB7113, SAPKB7114, SAPKB7115, SAPKB7116, SAPKB7117, SAPKB7118, SAPKB7119, SAPKB70103, SAPKB71102)
SAP Notes
(1261319-1)
Описание
The user name is transferred in the URL.
Как исправить
Since you are using the back-end user, you cannot use the URL for a manipulation.
Ссылки