Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1488453-4)
SAP Support Packages
(SAPKU40018, SAPKU50018, SAPKU52011, SAPKU60009, SAPKU70009, SAPKU70102)
Описание
Condition cross-client customizing download lacks permission checks for an authenticated user#s authorization to access some of its functionality. This may result in undesired system behavior.
Как исправить
An authority check is added to this function module so that only the clients with cross-client customizing maintenance authorization and the users with condition generation authorization (object /SAPCND/CO activity 64) can execute this program.
Ссылки
