Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1436936-4)
SAP Support Packages
(SAPKB70022, SAPKB70107, SAPKB70204, SAPKB71010, SAPKB71105, SAPKB72003)
Описание
Web Dynpro ABAP is not sufficiently protected against XSRF (CSRF) attacks.
By imitating the logon data of a legitimate user, XSRF attacks can change data in the back end.
By imitating the logon data of a legitimate user, XSRF attacks can change data in the back end.
Как исправить
Import the relevant Support Package or implement the relevant correction instructions.
Ссылки
