Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1503582-6)
SAP Support Packages
(MESSAGING_SYSTEM_SERVICE_710_SP012_000000, MESSAGING_SYSTEM_SERVICE_710_SP999999_999999, MESSAGING_SYSTEM_SERVICE_711_SP007_000000, MESSAGING_SYSTEM_SERVICE_711_SP999999_999999, XI_ADAPTER_FRAMEWORK_CORE_30_SP027_000000, XI_ADAPTER_FRAMEWORK_CORE_30_SP999999_999999, XI_ADAPTER_FRAMEWORK_CORE_700_SP023_000000, XI_ADAPTER_FRAMEWORK_CORE_700_SP999999_999999, XI_ADAPTER_FRAMEWORK_CORE_701_SP008_000000, XI_ADAPTER_FRAMEWORK_CORE_701_SP999999_999999, XI_ADAPTER_FRAMEWORK_CORE_702_SP006_000000, XI_ADAPTER_FRAMEWORK_CORE_702_SP999999_999999, XI_TOOLS_701_SP008_000000, XI_TOOLS_701_SP999999_999999)
Описание
SAP XI Runtime Workbench is the central UI for monitoring entire XI landscapes. It should provide a way to log off currently logged in user from all backend systems in use.
Using logging off the users improves the security as unattended terminals do not stay active indefinitely and can be used for unauthorized access by third parties.
Using logging off the users improves the security as unattended terminals do not stay active indefinitely and can be used for unauthorized access by third parties.
Как исправить
The RWB user interface was improved by providing log off link. The correction is part of the following and newer Support Packages:
XI 3.0 SP27
XI 7.0 SP23
XI 7.01 SP08
XI 7.02 SP06
PI 7.10 SP12
PI 7.11 SP07
Details:
Logging off is performed in two steps:
1. Logging off from all backend systems (Adapter Engines) part of the monitored XI landscape.
2. Logging off from the system, where RWB is up and running.
After successfull log off the standard SAP J2EE Engine log off page is displayed.
XI 3.0 SP27
XI 7.0 SP23
XI 7.01 SP08
XI 7.02 SP06
PI 7.10 SP12
PI 7.11 SP07
Details:
Logging off is performed in two steps:
1. Logging off from all backend systems (Adapter Engines) part of the monitored XI landscape.
2. Logging off from the system, where RWB is up and running.
After successfull log off the standard SAP J2EE Engine log off page is displayed.
Ссылки
