Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1488964-8)
SAP Support Packages
(SAPK-70409INBICONT, SAPK-70502INBICONT)
Описание
The problem is caused by an SQL injection vulnerability. The code composes an SQL statement that contains strings that can be altered by a malicious user. The manipulated SQL statement can then be used to retrieve data from the database.
Как исправить
Implement the correction as described in the correction instructions.
After applying the correction the testreport /RTF/TEST_KTRF will exit immediately without any further processing.
If you want to use this functionality further, copy the report and modify it according to your needs.
------------------------------------------------------------------------
|Manual Pre-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component BI_CONT Business Intell...|
| Release 703 All Support Package Levels |
| Release 704 Until SAPK-70408INBICONT |
| Release 705 Until SAPK-70501INBICONT |
| Release 724 Until SAPK-72402INBICONT |
| Release 735 w/o Support Packages |
------------------------------------------------------------------------
For report /RTF/TEST_KTRF create the text element 006 with the text 'Report is not supported anymore. If required please create custom developed copy'.
After applying the correction the testreport /RTF/TEST_KTRF will exit immediately without any further processing.
If you want to use this functionality further, copy the report and modify it according to your needs.
------------------------------------------------------------------------
|Manual Pre-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component BI_CONT Business Intell...|
| Release 703 All Support Package Levels |
| Release 704 Until SAPK-70408INBICONT |
| Release 705 Until SAPK-70501INBICONT |
| Release 724 Until SAPK-72402INBICONT |
| Release 735 w/o Support Packages |
------------------------------------------------------------------------
For report /RTF/TEST_KTRF create the text element 006 with the text 'Report is not supported anymore. If required please create custom developed copy'.
Ссылки
