Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1487019-5)
SAP Support Packages
(SAPK-60307INEAAPPL, SAPK-60308INEAAPPL, SAPK-60408INEAAPPL, SAPK-60409INEAAPPL, SAPK-60502INEAAPPL, SAPK-60503INEAAPPL, SAPK-60504INEAAPPL)
Описание
Programs RM_RECIPE_SAMPLE_DATA and RM_INITIAL_DATA_LOAD fails to correctly validate the path a user-submitted file is written to. This means that an attacker can potentially overwrite data on the remote system.
Как исправить
Please refer to note 1497003 for additional information and instructions. The corrections from note 1497003 are a prerequisite for implementation of this note.
Implement the source code changes that are described in the advance corrections.
After the implementation of the correction, program RM_RECIPE_SAMPLE_DATA does not save the sample data on application server anymore. However, sample data can still be downloaded to presentation server.
Implement the source code changes that are described in the advance corrections.
After the implementation of the correction, program RM_RECIPE_SAMPLE_DATA does not save the sample data on application server anymore. However, sample data can still be downloaded to presentation server.
Ссылки
