Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1473165-6)
SAP Support Packages
(SAPK-60308INEAPS, SAPK-60409INEAPS, SAPK-60503INEAPS, SAPKGPPC24, SAPKGPPD19)
Описание
Some programs within component PSM-FG fails to correctly validate the path a user-submitted file is read from or written to. Through this, an attacker can potentially point the program to an arbitrary other file on the system, disclosing its contents, or overwriting data on the remote system.
Как исправить
The affected programs are obsolete so instead of doing extensive changes in the programs, the source code is commented out so that the programs cannot be used to access confidential data.
Ссылки
