Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1499392-6)
SAP Support Packages
(SAPK-70108INPIBASIS, SAPK-71107INPIBASIS, SAPKIPYJ5M, SAPKIPYJ6L, SAPKIPYJ7N, SAPKIPYK12, SAPKIPYL11, SAPKIPYM13, SAPKIPYM14, SAPKIPYN12, SAPKIPZI4J)
Описание
The CRM Middleware extractor lacks permission checks for an authenticated user's authorization to access some of its functionality. This may result in undesired system behavior.
Как исправить
The specified Support Package contains the corrections.
For implementation using transaction SNOTE, note that manual processing steps are required.
See also Notes 1502607, 1501685 and 1498111.
------------------------------------------------------------------------
|Manual Pre-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component PI_BASIS Basis Plug-In |
| Release 2004_1_620 Until SAPKIPYI5A |
| Release 2004_1_640 Until SAPKIPYI6A |
| Release 2005_1_620 Until SAPKIPYJ5L |
| Release 2005_1_640 Until SAPKIPYJ6K |
| Release 2005_1_700 Until SAPKIPYJ7M |
| Release 2006_1_700 Until SAPKIPYM12 |
| Release 2006_1_620 Until SAPKIPYK11 |
| Release 2006_1_710 Until SAPKIPYN11 |
| Release 2006_1_640 Until SAPKIPYL10 |
| Release 701 Until SAPK-70107INPIBASIS |
| Release 702 All Support Package Levels |
| Release 711 Until SAPK-71106INPIBASIS |
| Release 720 All Support Package Levels |
| Release 730 All Support Package Levels |
------------------------------------------------------------------------
1. Install the attached files. These contain the authorization object SCRMMW and all the related structures. Follow Notes 480180 and 13719 for the installation.
2. Maintain roles
Create one or more roles in transaction PFCG with the required authorizations and profiles.
In the standard system, the role MW_ADMIN is delivered with the profile C_MW_ADMIN. This role contains the authorization for the activities 1, 2, 5, 6, and 7.
3. Assign authorizations
Assign the required authorizations to the users. In particular, users that are allowed to execute an initial load for Customizing objects in the ERP system require the authorization for activity 1. Refer also to Note 1498111 for information about this.
------------------------------------------------------------------------
|Manual Pre-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component PI SAP R/3 PlugIn... |
| Release 2004_1_46C Until SAPKIPZI4I |
------------------------------------------------------------------------
1. Install the attached files. These contain the authorization object SCRMMW and all the related structures. Follow Notes 480180 and 13719 for the installation.
2. Maintain roles
Create one or more roles in transaction PFCG with the required authorizations and profiles.
In the standard system, the role MW_ADMIN is delivered with the profile C_MW_ADMIN. This role contains the authorization for the activities 1, 2, 5, 6, and 7.
3. Assign authorizations
Assign the required authorizations to the users. In particular, users that are allowed to execute an initial load for Customizing objects in the ERP system require the authorization for activity 1. Refer also to Note 1498111 for information about this.
For implementation using transaction SNOTE, note that manual processing steps are required.
See also Notes 1502607, 1501685 and 1498111.
------------------------------------------------------------------------
|Manual Pre-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component PI_BASIS Basis Plug-In |
| Release 2004_1_620 Until SAPKIPYI5A |
| Release 2004_1_640 Until SAPKIPYI6A |
| Release 2005_1_620 Until SAPKIPYJ5L |
| Release 2005_1_640 Until SAPKIPYJ6K |
| Release 2005_1_700 Until SAPKIPYJ7M |
| Release 2006_1_700 Until SAPKIPYM12 |
| Release 2006_1_620 Until SAPKIPYK11 |
| Release 2006_1_710 Until SAPKIPYN11 |
| Release 2006_1_640 Until SAPKIPYL10 |
| Release 701 Until SAPK-70107INPIBASIS |
| Release 702 All Support Package Levels |
| Release 711 Until SAPK-71106INPIBASIS |
| Release 720 All Support Package Levels |
| Release 730 All Support Package Levels |
------------------------------------------------------------------------
1. Install the attached files. These contain the authorization object SCRMMW and all the related structures. Follow Notes 480180 and 13719 for the installation.
2. Maintain roles
Create one or more roles in transaction PFCG with the required authorizations and profiles.
In the standard system, the role MW_ADMIN is delivered with the profile C_MW_ADMIN. This role contains the authorization for the activities 1, 2, 5, 6, and 7.
3. Assign authorizations
Assign the required authorizations to the users. In particular, users that are allowed to execute an initial load for Customizing objects in the ERP system require the authorization for activity 1. Refer also to Note 1498111 for information about this.
------------------------------------------------------------------------
|Manual Pre-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component PI SAP R/3 PlugIn... |
| Release 2004_1_46C Until SAPKIPZI4I |
------------------------------------------------------------------------
1. Install the attached files. These contain the authorization object SCRMMW and all the related structures. Follow Notes 480180 and 13719 for the installation.
2. Maintain roles
Create one or more roles in transaction PFCG with the required authorizations and profiles.
In the standard system, the role MW_ADMIN is delivered with the profile C_MW_ADMIN. This role contains the authorization for the activities 1, 2, 5, 6, and 7.
3. Assign authorizations
Assign the required authorizations to the users. In particular, users that are allowed to execute an initial load for Customizing objects in the ERP system require the authorization for activity 1. Refer also to Note 1498111 for information about this.
Ссылки
