Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1488846-1)
SAP Support Packages
(CRM_JAVA_APPLICATIONS_50_SP017_000005, CRM_JAVA_APPLICATIONS_50_SP999999_999999, CRM_JAVA_APPLICATIONS_52_SP010_000006, CRM_JAVA_APPLICATIONS_52_SP999999_999999, CRM_JAVA_APPLICATIONS_60_SP006_000022, CRM_JAVA_APPLICATIONS_60_SP007_000001, CRM_JAVA_APPLICATIONS_60_SP999999_999999, CRM_JAVA_APPLICATIONS_70_SP007_000008, CRM_JAVA_APPLICATIONS_70_SP999999_999999, CRM_JAVA_COMPONENTS_50_SP017_000005, CRM_JAVA_COMPONENTS_50_SP999999_999999, CRM_JAVA_COMPONENTS_52_SP010_000006, CRM_JAVA_COMPONENTS_52_SP999999_999999, CRM_JAVA_COMPONENTS_60_SP006_000022, CRM_JAVA_COMPONENTS_60_SP007_000001, CRM_JAVA_COMPONENTS_60_SP999999_999999, CRM_JAVA_COMPONENTS_70_SP007_000008, CRM_JAVA_COMPONENTS_70_SP999999_999999, CRM_JAVA_WEB_COMPONENTS_50_SP017_000005, CRM_JAVA_WEB_COMPONENTS_50_SP999999_999999, CRM_JAVA_WEB_COMPONENTS_52_SP010_000006, CRM_JAVA_WEB_COMPONENTS_52_SP999999_999999, CRM_JAVA_WEB_COMPONENTS_60_SP006_000022, CRM_JAVA_WEB_COMPONENTS_60_SP007_000001, CRM_JAVA_WEB_COMPONENTS_60_SP999999_999999, CRM_JAVA_WEB_COMPONENTS_70_SP007_000008, CRM_JAVA_WEB_COMPONENTS_70_SP999999_999999, SAP_SHARED_JAVA_APPLIC_50_SP017_000005, SAP_SHARED_JAVA_APPLIC_50_SP999999_999999, SAP_SHARED_JAVA_APPLIC_52_SP010_000006, SAP_SHARED_JAVA_APPLIC_52_SP999999_999999, SAP_SHARED_JAVA_APPLIC_60_SP006_000022, SAP_SHARED_JAVA_APPLIC_60_SP007_000001, SAP_SHARED_JAVA_APPLIC_60_SP999999_999999, SAP_SHARED_JAVA_APPLIC_70_SP007_000008, SAP_SHARED_JAVA_APPLIC_70_SP999999_999999, SAP_SHARED_JAVA_COMPONENTS_50_SP017_000005, SAP_SHARED_JAVA_COMPONENTS_50_SP999999_999999, SAP_SHARED_JAVA_COMPONENTS_52_SP010_000006, SAP_SHARED_JAVA_COMPONENTS_52_SP999999_999999, SAP_SHARED_JAVA_COMPONENTS_60_SP006_000022, SAP_SHARED_JAVA_COMPONENTS_60_SP007_000001, SAP_SHARED_JAVA_COMPONENTS_60_SP999999_999999, SAP_SHARED_JAVA_COMPONENTS_70_SP007_000008, SAP_SHARED_JAVA_COMPONENTS_70_SP999999_999999, SAP_SHARED_WEB_COMPONENTS_50_SP017_000005, SAP_SHARED_WEB_COMPONENTS_50_SP999999_999999, SAP_SHARED_WEB_COMPONENTS_52_SP010_000006, SAP_SHARED_WEB_COMPONENTS_52_SP999999_999999, SAP_SHARED_WEB_COMPONENTS_60_SP006_000022, SAP_SHARED_WEB_COMPONENTS_60_SP007_000001, SAP_SHARED_WEB_COMPONENTS_60_SP999999_999999, SAP_SHARED_WEB_COMPONENTS_70_SP007_000008, SAP_SHARED_WEB_COMPONENTS_70_SP999999_999999)
Описание
Как исправить
This note contains Java Correction(s) for E-Commerce / Web Channel.
The application shall not rely on the Invoker Servlet feature but use local servlets, i.e. defined in its own web.xml file only. In general the change can be done entirely in the web.xml file of the application.
Software Component: SAP-SHRWEB
In the following Development Components the web.xml file was adjusted: crm/isa/web/shopadmin, crm/isa/web/isauseradm, crm/ipc/web/ipc, crm/isa/web/catalogtool, crm/isa/web/catalog, crm/isa/web/b2c, crm/isa/web/b2b, crm/isa/web/auctionb2x, crm/isa/web/auctionebay
Software Component: SAP-CRMWEB
In the following Development Components the web.xml file was adjusted:
crm/isa/web/sharedcatalog, crm/isa/web/partnerregistration, crm/isa/web/lwc, crm/isa/web/imsadmin, crm/isa/web/entitlementinquiry, crm/isa/web/cviews, crm/icss/web/icss_b2c, crm/icss/web/icss_b2b, crm/eservice/web/insp_b2b, crm/eservice/web/cr_b2b.
The application shall not rely on the Invoker Servlet feature but use local servlets, i.e. defined in its own web.xml file only. In general the change can be done entirely in the web.xml file of the application.
Software Component: SAP-SHRWEB
In the following Development Components the web.xml file was adjusted: crm/isa/web/shopadmin, crm/isa/web/isauseradm, crm/ipc/web/ipc, crm/isa/web/catalogtool, crm/isa/web/catalog, crm/isa/web/b2c, crm/isa/web/b2b, crm/isa/web/auctionb2x, crm/isa/web/auctionebay
Software Component: SAP-CRMWEB
In the following Development Components the web.xml file was adjusted:
crm/isa/web/sharedcatalog, crm/isa/web/partnerregistration, crm/isa/web/lwc, crm/isa/web/imsadmin, crm/isa/web/entitlementinquiry, crm/isa/web/cviews, crm/icss/web/icss_b2c, crm/icss/web/icss_b2b, crm/eservice/web/insp_b2b, crm/eservice/web/cr_b2b.
Ссылки
