Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1506767-9)
SAP Support Packages
(SAPKB70108, SAPKB70206, SAPKB72004, SAPKB73001, SAPKB73002)
Описание
The Transport Organizer Web UI fails to correctly validate the path with which a file that is read from the remote server is referenced. This means that an attacker can potentially point the program to an arbitrary other file on the system, disclosing its contents.
Как исправить
Please apply the correction instruction provide with this note or update to a sufficient support package level.
Remark: This note is not applicable for
NW701 SP00-SP06
NW702 SP00-SP04
NW720 SP00-SP03
as the application/code fixed with this note was delivered with NW701 SP07 and its equivalent release NW702 SP05, NW720 SP03 and NW730.
Remark: This note is not applicable for
NW701 SP00-SP06
NW702 SP00-SP04
NW720 SP00-SP03
as the application/code fixed with this note was delivered with NW701 SP07 and its equivalent release NW702 SP05, NW720 SP03 and NW730.
Ссылки
