Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1466479-1)
SAP Support Packages
(SAPKU50017, SAPKU51006, SAPKU52010, SAPKU60008, SAPKU70007)
Описание
Information such as the planning profile group composition can be discovered. This information can potentially be used by a malicious user to further target Account Planning.
Как исправить
Please follow the manual steps provided.
------------------------------------------------------------------------
|Manual Pre-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component BBPCRM BBP / CRM |
| Release 500 Until SAPKU50016 |
| Release 510 Until SAPKU51005 |
| Release 520 Until SAPKU52009 |
| Release 700 Until SAPKU70006 |
| Release 600 Until SAPKU60007 |
------------------------------------------------------------------------
Go to transaction se11.
In the field "Database table", enter "CACP_PLANGRPPROF".
Click on the button "Display".
From the menu "Utilities", select "Assign Authorization Group".
From the menu "Table View", select "Display -> Change".
In the column "Authorization" associated to table "CACP_PLANGRPPROF", change the value from "&NC&" to "CRMC".
Save.
------------------------------------------------------------------------
|Manual Pre-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component BBPCRM BBP / CRM |
| Release 500 Until SAPKU50016 |
| Release 510 Until SAPKU51005 |
| Release 520 Until SAPKU52009 |
| Release 700 Until SAPKU70006 |
| Release 600 Until SAPKU60007 |
------------------------------------------------------------------------
Go to transaction se11.
In the field "Database table", enter "CACP_PLANGRPPROF".
Click on the button "Display".
From the menu "Utilities", select "Assign Authorization Group".
From the menu "Table View", select "Display -> Change".
In the column "Authorization" associated to table "CACP_PLANGRPPROF", change the value from "&NC&" to "CRMC".
Save.
Ссылки