Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1510478-3)
SAP Support Packages
(SAPKH31IB9, SAPKH40B89, SAPKH45B67, SAPKH46B62, SAPKH46C62, SAPKH47036, SAPKH50024, SAPKH60019, SAPKH60209, SAPKH60308, SAPKH60409, SAPKH60503)
Описание
The programs contained in the correction instructions contain vulnerabilities through which a malicious user can potentially read arbitrary files on the remote server, possibly disclosing confidential information.
Some of the programs contained in the correction instructions contain a vulnerability through which a malicious user can potentially write arbitrary files on the remote server, possibly corrupting data or altering system behavior.
Some of the programs contained in the correction instructions contain a vulnerability through which a malicious user can potentially write arbitrary files on the remote server, possibly corrupting data or altering system behavior.
Как исправить
Apply the correction and refer to note 1497003 for additional information and instructions. The corrections from note 1497003 are a prerequisite for implementation of this note.
Logical File Names Used in SAP Material Management application
The following logical file names have been created in order to enable the validation of logical file names:
1. MMIM_PHYSICAL_INVENTORY_DOCUMENTS_NEW
Programs using this logical file name:
RM07EDMI
2. MM_PURCHASING_INFORECORDS_NEW
Programs using this logical file name:
RM06IBIS
RM06IBIE
3. MM_PURCHASING_REQUISITIONS_NEW
Programs using this logical file name:
RM06BBIS
RM06BBIE
Logical Path Names Used in the SAP Material Management application
The logical file name MM_PURCHASING_INFORECORDS_NEW and MM_PURCHASING_REQUISITIONS_NEW use the logical file path MM_PUR_ROOT, the logical file name MMIM_PHYSICAL_INVENTORY_DOCUMENTS_NEW uses the logical file path MM_IM_ROOT
Logical File Names Used in SAP Logistic Execution application
The following logical file names have been created in order to enable the validation of logical file names:
1. MM_WM_LAGP_TAKEOVER_NEW
Programs using this logical file name:
RLMIGR01
2. MM_WM_BIN_TAKEOVER_NEW
Programs using this logical file name:
RLMIGR02
3. MM_WM_LQUA_TAKEOVER
Programs using this logical file name:
RLMIGR03
4. MM_WM_STOCK_TAKEOVER
Programs using this logical file name:
RLMIGR04
5. MM_WM_MLGN_TAKEOVER
Programs using this logical file name:
RLMIGR05
6. MM_WM_MLGT_TAKEOVER
Programs using this logical file name:
RLMIGR06
Logical Path Names Used in the SAP Logistic Execution application
The logical file names listed above all use the logical file path MM_WM_ROOT
Logical File Names Used in SAP Material Management application
The following logical file names have been created in order to enable the validation of logical file names:
1. MMIM_PHYSICAL_INVENTORY_DOCUMENTS_NEW
Programs using this logical file name:
RM07EDMI
2. MM_PURCHASING_INFORECORDS_NEW
Programs using this logical file name:
RM06IBIS
RM06IBIE
3. MM_PURCHASING_REQUISITIONS_NEW
Programs using this logical file name:
RM06BBIS
RM06BBIE
Logical Path Names Used in the SAP Material Management application
The logical file name MM_PURCHASING_INFORECORDS_NEW and MM_PURCHASING_REQUISITIONS_NEW use the logical file path MM_PUR_ROOT, the logical file name MMIM_PHYSICAL_INVENTORY_DOCUMENTS_NEW uses the logical file path MM_IM_ROOT
Logical File Names Used in SAP Logistic Execution application
The following logical file names have been created in order to enable the validation of logical file names:
1. MM_WM_LAGP_TAKEOVER_NEW
Programs using this logical file name:
RLMIGR01
2. MM_WM_BIN_TAKEOVER_NEW
Programs using this logical file name:
RLMIGR02
3. MM_WM_LQUA_TAKEOVER
Programs using this logical file name:
RLMIGR03
4. MM_WM_STOCK_TAKEOVER
Programs using this logical file name:
RLMIGR04
5. MM_WM_MLGN_TAKEOVER
Programs using this logical file name:
RLMIGR05
6. MM_WM_MLGT_TAKEOVER
Programs using this logical file name:
RLMIGR06
Logical Path Names Used in the SAP Logistic Execution application
The logical file names listed above all use the logical file path MM_WM_ROOT
Ссылки
