Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1510342-2)
SAP Support Packages
(SAPKB70023, SAPKB70108, SAPKB70206, SAPKB71012, SAPKB71106, SAPKB73002)
Описание
The program code contains a possibility to define and execute code of the user#s choice which changes the system#s behavior. A valid and authenticated user is required. In addition, one ore more authorizations for Authorization object S_DB2_ADM are required. Depending on the code the user can inject and run their own code, the user may obtain additional information which should not be displayed, they may be able to modify data, delete data, modify the output of the system, or create new users with higher privileges or perform a denial of service attack.
Как исправить
Import one of the following Support Packages:
SAP Basis 7.00 Support Package 23
SAP Basis 7.01 Support Package 8
SAP Basis 7.02 Support Package 6
SAP Basis 7.10 Support Package 12
SAP Basis 7.11 Support Package 6
SAP Basis 7.30 Support Package 2.
SAP Basis 7.00 Support Package 23
SAP Basis 7.01 Support Package 8
SAP Basis 7.02 Support Package 6
SAP Basis 7.10 Support Package 12
SAP Basis 7.11 Support Package 6
SAP Basis 7.30 Support Package 2.
Ссылки
