Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1492434-4)
SAP Support Packages
(SAPKA70108, SAPKA70205, SAPKA71106, SAPKA72004, SAPKA73001)
Описание
The program code contains a possibility to define and execute code of the user#s choice which changes the system#s behavior. Valid log on information is required for this purpose.
Depending on the inserted code, the malicious user can obtain unauthorized access to data and change or delete this data, but also change system outputs or create new users and cause a Denial of Service.
Depending on the inserted code, the malicious user can obtain unauthorized access to data and change or delete this data, but also change system outputs or create new users and cause a Denial of Service.
Как исправить
The report RIWP_VIEW_GENERATE is commented completely.
Ссылки
