Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1453655-1)
SAP Support Packages
(SAPK-470A8INSAPHRCDK, SAPK-50074INSAPHRCDK, SAPK-60057INSAPHRCDK, SAPK-60423INSAPHRCDK, SAPKE46CG3)
Описание
The program code contains a possibility to uncomment commented ABAP code by removing the character '*' in the first position of a code line or to do the opposite operation, comment code by inserting '*' at the first position. A valid and authenticated user and authorization for transaction SA38 or SE38 is required.
Although the vulnerability is caused by code belonging to SAP_HRCDK the vulnerability is not restricted to this component as code of any other any other component of the system can be changed.
Although the vulnerability is caused by code belonging to SAP_HRCDK the vulnerability is not restricted to this component as code of any other any other component of the system can be changed.
Как исправить
Apply the attached correction instructions or implement the HR support pacakges in which the corrections have been included.
Ссылки
