Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1494228-1)
SAP Support Packages
(SAPKY30A32, SAPKY31027, SAPKY40022, SAPKY41021, SAPKY50019, SAPKY51015, SAPKY70009, SAPKY70103)
Описание
The problem is caused by an SQL injection vulnerability. The code composes an SQL statement including strings that can be altered by a malicious user. The manipulated SQL statement can then be used to retrieve additional information from the database or to potentially modify it.
Как исправить
Implement the attached correction instructions or the relevant support package
------------------------------------------------------------------------
|Manual Pre-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component SAP_APO SAP Advanced Pl...|
| Release 30A Until SAPKY30A31 |
| Release 310 Until SAPKY31026 |
------------------------------------------------------------------------
1) To create message 050 in message class /SAPAPO/APX execute transaction SE91.
2) Enter '/SAPAPO/APX' in the message class editbox and '050' for the message number, and press create button.
3) Enter the following short text: 'Obsolete Function Module'.
4) Save and exit.
------------------------------------------------------------------------
|Manual Pre-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component SCM SCM (Supply Cha...|
| Release 400 Until SAPKY40021 |
| Release 410 Until SAPKY41020 |
| Release 500 Until SAPKY50018 |
| Release 510 Until SAPKY51014 |
| Release 700 Until SAPKY70008 |
| Release 701 Until SAPKY70102 |
------------------------------------------------------------------------
1) To create message 050 in message class /SAPAPO/APX execute transaction SE91.
2) Enter '/SAPAPO/APX' in the message class editbox and '050' for the message number, and press create button.
3) Enter the following short text: 'Obsolete Function Module'.
4) Save and exit.
------------------------------------------------------------------------
|Manual Pre-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component SAP_APO SAP Advanced Pl...|
| Release 30A Until SAPKY30A31 |
| Release 310 Until SAPKY31026 |
------------------------------------------------------------------------
1) To create message 050 in message class /SAPAPO/APX execute transaction SE91.
2) Enter '/SAPAPO/APX' in the message class editbox and '050' for the message number, and press create button.
3) Enter the following short text: 'Obsolete Function Module'.
4) Save and exit.
------------------------------------------------------------------------
|Manual Pre-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component SCM SCM (Supply Cha...|
| Release 400 Until SAPKY40021 |
| Release 410 Until SAPKY41020 |
| Release 500 Until SAPKY50018 |
| Release 510 Until SAPKY51014 |
| Release 700 Until SAPKY70008 |
| Release 701 Until SAPKY70102 |
------------------------------------------------------------------------
1) To create message 050 in message class /SAPAPO/APX execute transaction SE91.
2) Enter '/SAPAPO/APX' in the message class editbox and '050' for the message number, and press create button.
3) Enter the following short text: 'Obsolete Function Module'.
4) Save and exit.
Ссылки
