Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1409141-4)
SAP Support Packages
(SAPKB64026, SAPKB70022, SAPKB70106, SAPKB70107, SAPKB70203, SAPKB71010, SAPKB71105, SAPKB72003)
Описание
Missing authority check in some transactions within Data Consistency Framework
Code correction to be done in following objects:
1. RFC /OSP/DCCT_LIGHTWEIGHT
Currently this RFC does not check for the condition if the input is passed or not. This condition needs to be checked by the RFC before processing the data consistency check.
2. Class: /OSP/CL_DCCT_LW_FACTORY, Method: CREATE
Currently this method creates object of the default DCC class if the custom class is not implemented. This condition is no more required.
Code correction to be done in following objects:
1. RFC /OSP/DCCT_LIGHTWEIGHT
Currently this RFC does not check for the condition if the input is passed or not. This condition needs to be checked by the RFC before processing the data consistency check.
2. Class: /OSP/CL_DCCT_LW_FACTORY, Method: CREATE
Currently this method creates object of the default DCC class if the custom class is not implemented. This condition is no more required.
Как исправить
Apply the correction instructions given in this note.
Ссылки
