Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1469982-3)
SAP Support Packages
(SAPK-470A8INSAPHRCIT, SAPK-50074INSAPHRCIT, SAPK-60057INSAPHRCIT, SAPK-60423INSAPHRCIT, SAPKE46CG3)
Описание
The program code contains a possibility to define and execute code of the user's choice which changes the system's behavior. A valid and authenticated user and authorization for transaction SA38 or SE38 is required.
Although the vulnerability is caused by code belonging to SAP_HR the injection is not restricted to this component as the injected code can affect any other component of the system.
Although the vulnerability is caused by code belonging to SAP_HR the injection is not restricted to this component as the injected code can affect any other component of the system.
Как исправить
Apply the attached correction instructions or implement the HR support packages in which the corrections have been included.
Ссылки
