Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1508969-3)
SAP Support Packages
(SAPK-70103INSRMSRV, SAPKIBKS17, SAPKIBKT18, SAPKIBKU06, SAPKIBKV10)
Описание
In certain scenarios, it is possible for an unauthorized and unauthenticated third party to trigger this functionality on behalf of an authorized authenticated user without the latter's knowledge and/or consent.
Как исправить
Import the according SP or follow the correction instructions being part of this note.
------------------------------------------------------------------------
|Manual Post-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component SRM_SERVER |
| Release 700 Until SAPKIBKV09 |
------------------------------------------------------------------------
Execute the report BSP_XSRF_PARAM_SRM_SERVER_700 and specify when requested a corresponding transport request number. The report will fill the database table BSPTEMPXSRFSTORE with corresponding table entries for the BSP applications adapted by this note.
------------------------------------------------------------------------
|Manual Post-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component SRM_SERVER |
| Release 600 SAPKIBKU04 - SAPKIBKU05 |
------------------------------------------------------------------------
Execute the report BSP_XSRF_PARAM_SRM_SERVER_600 and specify when requested a corresponding transport request number. The report will fill the database table BSPTEMPXSRFSTORE with corresponding table entries for the BSP applications adapted by this note.
------------------------------------------------------------------------
|Manual Post-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component SRM_SERVER |
| Release 550 Until SAPKIBKT17 |
------------------------------------------------------------------------
Execute the report BSP_XSRF_PARAM_SRM_SERVER_550 and specify when requested a corresponding transport request number. The report will fill the database table BSPTEMPXSRFSTORE with corresponding table entries for the BSP applications adapted by this note.
------------------------------------------------------------------------
|Manual Post-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component SRM_SERVER |
| Release 500 Until SAPKIBKS16 |
------------------------------------------------------------------------
Execute the report BSP_XSRF_PARAM_SRM_SERVER_500 and specify when requested a corresponding transport request number. The report will fill the database table BSPTEMPXSRFSTORE with corresponding table entries for the BSP applications adapted by this note.
------------------------------------------------------------------------
|Manual Post-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component SRM_SERVER |
| Release 600 Until SAPKIBKU05 |
------------------------------------------------------------------------
Execute the report BSP_XSRF_PARAM_SRM_SERVER_600 and specify when requested a corresponding transport request number. The report will fill the database table BSPTEMPXSRFSTORE with corresponding table entries for the BSP applications adapted by this note.
------------------------------------------------------------------------
|Manual Post-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component SRM_SERVER |
| Release 700 Until SAPKIBKV09 |
------------------------------------------------------------------------
Execute the report BSP_XSRF_PARAM_SRM_SERVER_700 and specify when requested a corresponding transport request number. The report will fill the database table BSPTEMPXSRFSTORE with corresponding table entries for the BSP applications adapted by this note.
------------------------------------------------------------------------
|Manual Post-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component SRM_SERVER |
| Release 600 SAPKIBKU04 - SAPKIBKU05 |
------------------------------------------------------------------------
Execute the report BSP_XSRF_PARAM_SRM_SERVER_600 and specify when requested a corresponding transport request number. The report will fill the database table BSPTEMPXSRFSTORE with corresponding table entries for the BSP applications adapted by this note.
------------------------------------------------------------------------
|Manual Post-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component SRM_SERVER |
| Release 550 Until SAPKIBKT17 |
------------------------------------------------------------------------
Execute the report BSP_XSRF_PARAM_SRM_SERVER_550 and specify when requested a corresponding transport request number. The report will fill the database table BSPTEMPXSRFSTORE with corresponding table entries for the BSP applications adapted by this note.
------------------------------------------------------------------------
|Manual Post-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component SRM_SERVER |
| Release 500 Until SAPKIBKS16 |
------------------------------------------------------------------------
Execute the report BSP_XSRF_PARAM_SRM_SERVER_500 and specify when requested a corresponding transport request number. The report will fill the database table BSPTEMPXSRFSTORE with corresponding table entries for the BSP applications adapted by this note.
------------------------------------------------------------------------
|Manual Post-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component SRM_SERVER |
| Release 600 Until SAPKIBKU05 |
------------------------------------------------------------------------
Execute the report BSP_XSRF_PARAM_SRM_SERVER_600 and specify when requested a corresponding transport request number. The report will fill the database table BSPTEMPXSRFSTORE with corresponding table entries for the BSP applications adapted by this note.
Ссылки
