Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1488211-2)
SAP Support Packages
(SAPKH60019, SAPKH60209, SAPKH60308, SAPKH60409, SAPKH60502)
Описание
The problem is caused by an SQL injection vulnerability. The code composes an SQL statement including strings that can be altered by a malicious user. The manipulated SQL statement can then be used to retrieve additional information from the database or to potentially modify it. Due to insufficient data validation checks the erroneous input data can cause a short dump and abort the execution. This can influence the system stability if a flood of short dumps gets induced.
Как исправить
Based on additional input data validation checks the system avoids short dumps in case of erroneous input data and instead a return code is set appropriately.
To achieve this please apply the correction instructions of this note or implement the according Support Package.
To achieve this please apply the correction instructions of this note or implement the according Support Package.
Ссылки
