Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1437224-13)
SAP Support Packages
(SAPK-60407INEARETAIL, SAPK-60501INEARETAIL, SAPK-60502INEARETAIL, SAPK-70408INBICONT, SAPK-70502INBICONT)
Описание
Due to missing authorization checks, the documents are displayed in the relevant document transactions without an authorization check being carried out first.
There is a program error.
There is a program error.
Как исправить
This problem is corrected as of EA-RETAIL 6.04 Support Package 6. If you require an advance correction, implement the attached correction instructions into your SAP ERP system.
For the correction instructions for EA-Retail 6.04 before Enhancement Package 6, there is the prerequisite that the function modules WRMA_ACCOUNT_DOC_DISP and WRMA_INVOICE_VERIFICATION_DISP are created as empty function modules. For this, carry out the following steps:
Step 1: In the ERP system, use transaction SE37 or follow the SAP menu path "Tools -> ABAP Workbench -> Development -> SE37 - Function Builder" to start the function builder.
Step 2: Create the new function module WRMA_ACCOUNT_DOC_DISP in the function group WRMA_DOCU_DISPLAY. Specify the following interface in the function module:
Import parameter I_DOC_YEAR of the data type WRMA_DE_DOC_YEAR.
Import parameter I_COMP_CODE of the data type BUKRS.
Import parameter I_DOC_NUM of the data type WRMA_DE_DOC_NUMBER.
Set the "Pass Value" indicator for all three parameters.
Then save and activate the function module that you have just created.
Step 3: Create the new function module WRMA_INVOICE_VERIFICATION_DISP in the function group WRMA_DOCU_DISPLAY. Specify the following interface in the function module:
Import parameter I_DOC_YEAR of the data type WRMA_DE_DOC_YEAR.
Import parameter I_DOC_NUM of the data type WRMA_DE_DOC_NUMBER.
Set the "Pass Value" indicator for both parameters. Then save and activate the function module that you have just created.
You can then implement the relevant correction instructions.
Changes in subsequent processing in the BW RMA Audit Trail are corrected by BI_CONT 704 Support Package 8 or BI_CONT 705 Support Package 2. If you require an advance correction, implement the attached correction instructions into your SAP BW system.
For the correction instructions for EA-Retail 6.04 before Enhancement Package 6, there is the prerequisite that the function modules WRMA_ACCOUNT_DOC_DISP and WRMA_INVOICE_VERIFICATION_DISP are created as empty function modules. For this, carry out the following steps:
Step 1: In the ERP system, use transaction SE37 or follow the SAP menu path "Tools -> ABAP Workbench -> Development -> SE37 - Function Builder" to start the function builder.
Step 2: Create the new function module WRMA_ACCOUNT_DOC_DISP in the function group WRMA_DOCU_DISPLAY. Specify the following interface in the function module:
Import parameter I_DOC_YEAR of the data type WRMA_DE_DOC_YEAR.
Import parameter I_COMP_CODE of the data type BUKRS.
Import parameter I_DOC_NUM of the data type WRMA_DE_DOC_NUMBER.
Set the "Pass Value" indicator for all three parameters.
Then save and activate the function module that you have just created.
Step 3: Create the new function module WRMA_INVOICE_VERIFICATION_DISP in the function group WRMA_DOCU_DISPLAY. Specify the following interface in the function module:
Import parameter I_DOC_YEAR of the data type WRMA_DE_DOC_YEAR.
Import parameter I_DOC_NUM of the data type WRMA_DE_DOC_NUMBER.
Set the "Pass Value" indicator for both parameters. Then save and activate the function module that you have just created.
You can then implement the relevant correction instructions.
Changes in subsequent processing in the BW RMA Audit Trail are corrected by BI_CONT 704 Support Package 8 or BI_CONT 705 Support Package 2. If you require an advance correction, implement the attached correction instructions into your SAP BW system.
Ссылки
