Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1446276-3)
SAP Support Packages
(SAPKB70107, SAPKB70204, SAPKB71010, SAPKB71105, SAPKB72003)
Описание
Several ABAP based functions used by CTC templates contains content that could be used maliciously.
Как исправить
Implement this note to secure function modules used by Central Technical Configuration environment.
If you apply the note manually you must also create the following messages in message class S_LMCFG_LIB using transaction SE91 as well:
026: No permission to view content of table &1
027: No permission to write content of table &1
028: No permission to truncate content of table &1
029: Table operation &1 not provided
030: No authorization to view content of table &1
031: No authorization to write content of table &1
032: No authorization to truncate content of table &1
033: No authorization for client independent changes
All internal CTC related function modules are protected by authorization object S_CTC. To grant permissions please assign role SAP_BC_CTC to the (administration) user if necessary.
If you apply the note manually you must also create the following messages in message class S_LMCFG_LIB using transaction SE91 as well:
026: No permission to view content of table &1
027: No permission to write content of table &1
028: No permission to truncate content of table &1
029: Table operation &1 not provided
030: No authorization to view content of table &1
031: No authorization to write content of table &1
032: No authorization to truncate content of table &1
033: No authorization for client independent changes
All internal CTC related function modules are protected by authorization object S_CTC. To grant permissions please assign role SAP_BC_CTC to the (administration) user if necessary.
Ссылки
