Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1506247-2)
SAP Support Packages
(SAPK-70102INSRMSRV, SAPKIBKV10)
Описание
A malicious user can trigger a condition in which the process enters an infinite loop, which causes it to consume all available processing time. This results in the entire machine being unresponsive until the process is manually killed. An adversary can use this flaw to launch a Denial of Service (DoS) attack.
Как исправить
Please implement the following manual instructions and also implement the attached advanced corrections:
Step 1. Goto transaction SE80.
Step 2. Goto the package "/SAPSRM/MV_REUSE".
Step 3. Expand class library.
Step 4. Goto the class "/SAPSRM/CL_NOTES_UTILITIES".
Step 5. Right click and choose 'Delete' from the menu.
Step 6. Delete the object and release the transport request.
Step 1. Goto transaction SE80.
Step 2. Goto the package "/SAPSRM/MV_REUSE".
Step 3. Expand class library.
Step 4. Goto the class "/SAPSRM/CL_NOTES_UTILITIES".
Step 5. Right click and choose 'Delete' from the menu.
Step 6. Delete the object and release the transport request.
Ссылки
