Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1507296-4)
SAP Support Packages
(BP_SUPPLIER_COLLABORATION_20_SP017_000000, BP_SUPPLIER_COLLABORATION_20_SP999999_999999)
Описание
Supplier Collaboration Portal executes certain functions through referencing specific URLs. When an attacker tricks an authenticated user's browser into making a request containing a certain URL and specific parameters, the function is executed with the rights of the user.
If present, the attacker may use a Cross Site Scripting attack to trigger the exploit, or use an approach in which a link to click is presented to the victim.
If present, the attacker may use a Cross Site Scripting attack to trigger the exploit, or use an approach in which a link to click is presented to the victim.
Как исправить
The changes done for fixing such issues are available in Supplier Collaboration 4.0 available with SRM 7.01 SP02.
You can find Supplier Collaboration 4.0 in the Support Package and Patch Area of the Service Marketplace.
You can find Supplier Collaboration 4.0 in the Support Package and Patch Area of the Service Marketplace.
Ссылки
