Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1496977-5)
SAP Support Packages
(SAPKB46B62, SAPKB46C61, SAPKB62069, SAPKB64027, SAPKB70023, SAPKB70108, SAPKB70205, SAPKB71011, SAPKB71106, SAPKB72004, SAPKB73001, SAPKH40B89, SAPKH45B67)
Описание
The BOR object REPORT lacks permission checks for an authenticated user#s authorization to access some of its functionality. This may result in undesired system behavior.
Как исправить
Import the Support Package or implement the correction instructions.
After that, the authorization object S_DEVELOP is checked in the BOR object REPORT.
------------------------------------------------------------------------
|Manual Post-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component SAP_APPL SAP Application |
| Release 40B Until SAPKH40B88 |
| Release 45B Until SAPKH45B66 |
------------------------------------------------------------------------
If you implement the note via the correction instructions, the following manual activities are required:
Use transaction SE91 to create the T100 message WO 814.
- Message short text: No change authorization (&) for program &
- The message is self-explanatory.
- Save the message.
Use transaction SWO1 to add the exception 1001 to the method EDIT of the BOR object REPORT.
- Number: 1001
- Error type: Application error
- Message: Application Area WO, Message 814
- Save and generate the BOR object
------------------------------------------------------------------------
|Manual Post-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component SAP_BASIS SAP Basis compo...|
| Release 610 Until SAPKB61047 |
| Release 46C Until SAPKB46C60 |
| Release 46B Until SAPKB46B61 |
| Release 46D All Support Package Levels |
| Release 620 Until SAPKB62068 |
| Release 640 Until SAPKB64026 |
| Release 700 Until SAPKB70022 |
| Release 710 Until SAPKB71010 |
| Release 711 Until SAPKB71105 |
| Release 701 Until SAPKB70107 |
| Release 702 Until SAPKB70204 |
| Release 730 w/o Support Packages |
| Release 720 Until SAPKB72003 |
------------------------------------------------------------------------
If you implement the note via the correction instructions, the following manual activities are required:
Use transaction SE91 to create the T100 message WO 814.
- Message short text: No change authorization (&) for program &
- The message is self-explanatory.
- Save the message.
Use transaction SWO1 to add the exception 1001 to the method EDIT of the BOR object REPORT.
- Number: 1001
- Error type: Application error
- Message: Application Area WO, Message 814
- Save and generate the BOR object
After that, the authorization object S_DEVELOP is checked in the BOR object REPORT.
------------------------------------------------------------------------
|Manual Post-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component SAP_APPL SAP Application |
| Release 40B Until SAPKH40B88 |
| Release 45B Until SAPKH45B66 |
------------------------------------------------------------------------
If you implement the note via the correction instructions, the following manual activities are required:
Use transaction SE91 to create the T100 message WO 814.
- Message short text: No change authorization (&) for program &
- The message is self-explanatory.
- Save the message.
Use transaction SWO1 to add the exception 1001 to the method EDIT of the BOR object REPORT.
- Number: 1001
- Error type: Application error
- Message: Application Area WO, Message 814
- Save and generate the BOR object
------------------------------------------------------------------------
|Manual Post-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component SAP_BASIS SAP Basis compo...|
| Release 610 Until SAPKB61047 |
| Release 46C Until SAPKB46C60 |
| Release 46B Until SAPKB46B61 |
| Release 46D All Support Package Levels |
| Release 620 Until SAPKB62068 |
| Release 640 Until SAPKB64026 |
| Release 700 Until SAPKB70022 |
| Release 710 Until SAPKB71010 |
| Release 711 Until SAPKB71105 |
| Release 701 Until SAPKB70107 |
| Release 702 Until SAPKB70204 |
| Release 730 w/o Support Packages |
| Release 720 Until SAPKB72003 |
------------------------------------------------------------------------
If you implement the note via the correction instructions, the following manual activities are required:
Use transaction SE91 to create the T100 message WO 814.
- Message short text: No change authorization (&) for program &
- The message is self-explanatory.
- Save the message.
Use transaction SWO1 to add the exception 1001 to the method EDIT of the BOR object REPORT.
- Number: 1001
- Error type: Application error
- Message: Application Area WO, Message 814
- Save and generate the BOR object
Ссылки
