Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1487475-6)
SAP Support Packages
(SAPK-60019INISUT, SAPK-60209INISUT, SAPK-60308INISUT, SAPK-60409INISUT, SAPK-60502INISUT, SAPKIPUL20)
Описание
Authorization checks that control the access to the functions are missing in the report ISU_CREATE_FUNCLOC_FOR_AREA. Without these checks, a user who is logged on can easily call these functions, which may lead to an unwanted change of the system response.
Как исправить
Implement this note.
Ссылки
