Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1509807-2)
Описание
The program code contains a possibility to define and execute code of the user's choice which changes the system#s behavior. A valid and authenticated user is required. Depending on the code the user can inject and run their own code, the user may obtain addi-tional information which should not be displayed, they may be able to modify data, delete data, modify the output of the system, or create new users with higher privileges or perform a denial of service attack.
Please apply the note 1509344 since the correction has been made under that note and same corrections in the note 1509344 is applicable to resolve this security issue.
Please apply the note 1509344 since the correction has been made under that note and same corrections in the note 1509344 is applicable to resolve this security issue.
Как исправить
Applying the note will protect the application from the following vulnerability:-
1) Code injection
Hence applying the note will prevent the PRA application from the above mentioned security vulnerability
1) Code injection
Hence applying the note will prevent the PRA application from the above mentioned security vulnerability
Ссылки
