Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1493379-3)
SAP Support Packages
(SAPKY30A32, SAPKY31027, SAPKY40022, SAPKY41021, SAPKY50019, SAPKY51014, SAPKY70008, SAPKY70102)
Описание
The SCM Optimizer Framework fails to correctly validate the path a user-submitted file is written to. Through this, an attacker can potentially overwrite data on the remote system.
Как исправить
Implement the source code corrections from the attached correction instructions from APO 3.0 to SCM 7.0 Enhancement Package 1.
Ссылки
