Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1504446-3)
SAP Support Packages
(SAPK-70108INSAPBSFND, SAPK-70203INSAPBSFND)
Описание
The RCCF fails to correctly validate the path a user-submitted file is written to. This means that an attacker can potentially overwrite data on the remote system.
Как исправить
Import SAP_BS_FND 7.01 Support Package 08 or SAP_BS_FND 7.02 Support Package 03.
Alternatively, you can implement the source code corrections contained in this note.
Alternatively, you can implement the source code corrections contained in this note.
Ссылки
