Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1506736-6)
SAP Support Packages
(SAPK-60308INEAFINSRV, SAPK-60409INEAFINSRV, SAPK-60503INEAFINSRV, SAPKGPFD19)
Описание
FS-CML fails to correctly validate the path a user-submitted file is written to. Through this, an attacker can potentially overwrite data on the remote system.
Как исправить
Please refer to note 1497003 for additional information and instructions. The corrections from note 1497003 are a prerequisite for implementation of this note.
CML_PAYMENT_US
Programs using this logical file name:
RFVD_AUTODRAFT_PROCESS
RFVD_PAY_STOP
CML_CREDIT_BUREAU
Programs using this logical file name:
RFVD_CBR_PROCESS
Logical File Paths Used in this Solution
The logical file names listed above all use the logical file path CML_ROOT.
CML_PAYMENT_US
Programs using this logical file name:
RFVD_AUTODRAFT_PROCESS
RFVD_PAY_STOP
CML_CREDIT_BUREAU
Programs using this logical file name:
RFVD_CBR_PROCESS
Logical File Paths Used in this Solution
The logical file names listed above all use the logical file path CML_ROOT.
Ссылки
