Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1450228-1)
SAP Support Packages
(SAPKB70022, SAPKB70107, SAPKB70204, SAPKB71010, SAPKB71105, SAPKB72003)
Описание
Directory folder is not validated.
Как исправить
The ICF handler CL_FP_ADS_HTTP_EXTENSION is used as a callback service. The Adobe Document Services, running on the Java stack, use this service to read and write spool files.
The correction provided by the assigned support package contain verifications of the file path and file name patterns.
This service is protected already by either user credentials (username and password or certificate). This information should not be disclosed since data can only be read and written if the user credentials are known.
The correction provided by the assigned support package contain verifications of the file path and file name patterns.
This service is protected already by either user credentials (username and password or certificate). This information should not be disclosed since data can only be read and written if the user credentials are known.
Ссылки
