Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1495570-4)
SAP Support Packages
(SAPKH46C61, SAPKH47035, SAPKH50023, SAPKH60018, SAPKH60208, SAPKH60307, SAPKH60407, SAPKH60502)
Описание
The program code allows source code that can be determined freely to be added and executed, which enables an attacker to control the system response. Valid logon information is required for this. In addition, the user requires the very high 'debug-replace' authorization and must bypass two additional security tests.
Как исправить
Implement the program corrections described below.
Ссылки