Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1433101-7)
SAP Support Packages
(SAPKB62068, SAPKB64026, SAPKB70022, SAPKB70107, SAPKB70204, SAPKB71010, SAPKB71105, SAPKB72003)
Описание
The trace search function in transaction SM51 can be misused on certain UNIX-based operating systems to execute processes directly on the operating system. This may also lead to an unrequired extension of authorizations (privilege escalation).
Transaction SM51 and the function module TH_GREP can be executed only by users who have the administration role "S_ADMI_FCD". As a result, possible misuse is reduced to only this user group.
Transaction SM51 and the function module TH_GREP can be executed only by users who have the administration role "S_ADMI_FCD". As a result, possible misuse is reduced to only this user group.
Как исправить
Import the Support Package specified in the note.
If the error "DBIF_RSQL_SQL_ERROR in CLM_CWB_NOTE_FUNC_SAVE" occurs in a system with MS SQL server when you implement the correction instructions, you must first implement Note 1377270.
If the error "DBIF_RSQL_SQL_ERROR in CLM_CWB_NOTE_FUNC_SAVE" occurs in a system with MS SQL server when you implement the correction instructions, you must first implement Note 1377270.
Ссылки
