Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1507122-2)
SAP Support Packages
(SAPK-60019INFICA, SAPK-60209INFICA, SAPK-60308INFICA, SAPK-60409INFICA, SAPK-60503INFICA, SAPK-60504INFICA, SAPKIPC634, SAPKIPC726, SAPKIPC727, SAPKIPC820, SAPKIPC821)
Описание
The programs contained in the correction instructions contain vulnerabilities through which a malicious user can potentially read arbitrary files on the remote server, possibly disclosing confidential information.
Some of the programs contained in the correction instructions contain a vulnerability through which a malicious user can potentially write arbitrary files on the remote server, possibly corrupting data or altering system behavior.
Some of the programs contained in the correction instructions contain a vulnerability through which a malicious user can potentially write arbitrary files on the remote server, possibly corrupting data or altering system behavior.
Как исправить
Please refer to note 1497003 for additional information and instructions. The corrections from note 1497003 are a prerequisite for implementation of this note.
Logical File Names Used in this Solution The following logical file names have been created in order to enable the validation of physical file names:
FI-CA-CARD-DATA-S (for report RFKKPCSF)
FI-CA-CVS (for Report RFKK_CVSPAY_CONFIRM)
FI-CA-DOC-EXTRACT-DIR
Logical File Paths Used in this Solution The logical file name is referenced to the logical path with the same name. For example, in logical file name FI-CA-CVS the logical path FI-CA-CVS used.
Logical File Names Used in this Solution The following logical file names have been created in order to enable the validation of physical file names:
FI-CA-CARD-DATA-S (for report RFKKPCSF)
FI-CA-CVS (for Report RFKK_CVSPAY_CONFIRM)
FI-CA-DOC-EXTRACT-DIR
Logical File Paths Used in this Solution The logical file name is referenced to the logical path with the same name. For example, in logical file name FI-CA-CVS the logical path FI-CA-CVS used.
Ссылки
