Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1507936-5)
Описание
The programs contained in the correction instructions contain vulnerabilities through which a malicious user can potentially read arbitrary files on the remote server, possibly disclosing confidential information.
Some of the programs contained in the correction instructions contain a vulnerability through which a malicious user can potentially write arbitrary files on the remote server, possibly corrupting data or altering system behavior.
Some of the programs contained in the correction instructions contain a vulnerability through which a malicious user can potentially write arbitrary files on the remote server, possibly corrupting data or altering system behavior.
Как исправить
Implement the corresponding support package.
The releationship between the HR Support Package and the technical name mentioned in the note is described in note 1232082.
As alternative, implement the correction instructions of note 1507935.
Please refer to note 1497003 for additional information and instructions. The corrections from note 1497003 are a prerequisite for the implementation of this note.
The preparations on application side have been provided with the notes 1498228 and 1506219. Implement the corresponding corrections as prerequisite.
The following logical file names have been created in order to enable the validation of physical file names:
Logical Filename Report HR_DE_DIR_B2A_KK_ZERTLIST RPUSVKD0 HR_DE_DIR_B2A_KK_ZERTREQUEST RPUSVKD0 HR_DE_DIR_B2A_KK_ZERTRESPONSE RPUSVKD0
Logical Filename Report HR_DE_DIR_RBM_IN RPCRBMD0_INBOUND HR_DE_DIR_RBM_OUT RPCZFADD_INBOUND HR_DE_DIR_RBM_PRO RPCRBMD0_INBOUND HR_DE_DIR_RPCAODD0 RPCAOPD0 and RPCOADD0 HR_DE_DIR_RPCEHBD0 RPCEHBD0 HR_DE_DIR_RPCEHCD1 RPCEHCD1 HR_DE_DIR_RPCEHFD0 RPCEHFD0 HR_DE_DIR_RPCSVGD0 RPCSVGD0 HR_DE_DIR_RPLEHAD3 RPLEHAD3 HR_DE_DIR_RPSKGOD0 RPSKGOD0 HR_DE_DIR_RPSPSDD0 RPSPSDD0 HR_DE_DIR_RPURZBD0 RPURZBD0 HR_DE_DIR_RPUTXCD0 RPUTXCD0 HR_DE_DIR_RPUTXED0 RPUTXED0 HR_DE_DIR_RPUVEODD RPUVEODD HR_DE_DIR_RPUWEDDA RPUWEDDA HR_DE_DIR_RPUZVCD2 RPUZVCD2 HR_DE_DIR_RPUZVTD2 RPUZVTD2 HR_DE_DIR_RPXKHSD0 RPXKHSD0
Logical Filename Report HR_DE_DIR_ZFA_INCOMING RPCZFADD_INBOUND HR_DE_DIR_ZFA_OUTGOING RPCZFADD_INBOUND HR_DE_DIR_ZFA_PROCESSED RPCZFADD_INBOUND
------------------------------------------------------------------------
|Manual Post-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component SAP_HR R/3 Standard Hu...|
| Release 46C From SAPKE46CF6 |
------------------------------------------------------------------------
Implement correction instructions of note 1507935.
This "manual" step has the correction instruction mentioned above as precondition and assures the implementation of note 1507935 when using the note assistant (SNOTE).
------------------------------------------------------------------------
|Manual Post-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component SAP_HRCDE SAP HR Germany |
| Release 470 From SAPK-47095INSAPHRCDE |
| Release 500 From SAPK-50061INSAPHRCDE |
| Release 600 From SAPK-60044INSAPHRCDE |
| Release 604 From SAPK-60410INSAPHRCDE |
------------------------------------------------------------------------
Implement correction instructions of note 1507935.
This "manual" step has the correction instruction mentioned above as precondition and assures the implementation of note 1507935 when using the note assistant (SNOTE).
The releationship between the HR Support Package and the technical name mentioned in the note is described in note 1232082.
As alternative, implement the correction instructions of note 1507935.
Please refer to note 1497003 for additional information and instructions. The corrections from note 1497003 are a prerequisite for the implementation of this note.
The preparations on application side have been provided with the notes 1498228 and 1506219. Implement the corresponding corrections as prerequisite.
The following logical file names have been created in order to enable the validation of physical file names:
Logical Filename Report HR_DE_DIR_B2A_KK_ZERTLIST RPUSVKD0 HR_DE_DIR_B2A_KK_ZERTREQUEST RPUSVKD0 HR_DE_DIR_B2A_KK_ZERTRESPONSE RPUSVKD0
Logical Filename Report HR_DE_DIR_RBM_IN RPCRBMD0_INBOUND HR_DE_DIR_RBM_OUT RPCZFADD_INBOUND HR_DE_DIR_RBM_PRO RPCRBMD0_INBOUND HR_DE_DIR_RPCAODD0 RPCAOPD0 and RPCOADD0 HR_DE_DIR_RPCEHBD0 RPCEHBD0 HR_DE_DIR_RPCEHCD1 RPCEHCD1 HR_DE_DIR_RPCEHFD0 RPCEHFD0 HR_DE_DIR_RPCSVGD0 RPCSVGD0 HR_DE_DIR_RPLEHAD3 RPLEHAD3 HR_DE_DIR_RPSKGOD0 RPSKGOD0 HR_DE_DIR_RPSPSDD0 RPSPSDD0 HR_DE_DIR_RPURZBD0 RPURZBD0 HR_DE_DIR_RPUTXCD0 RPUTXCD0 HR_DE_DIR_RPUTXED0 RPUTXED0 HR_DE_DIR_RPUVEODD RPUVEODD HR_DE_DIR_RPUWEDDA RPUWEDDA HR_DE_DIR_RPUZVCD2 RPUZVCD2 HR_DE_DIR_RPUZVTD2 RPUZVTD2 HR_DE_DIR_RPXKHSD0 RPXKHSD0
Logical Filename Report HR_DE_DIR_ZFA_INCOMING RPCZFADD_INBOUND HR_DE_DIR_ZFA_OUTGOING RPCZFADD_INBOUND HR_DE_DIR_ZFA_PROCESSED RPCZFADD_INBOUND
------------------------------------------------------------------------
|Manual Post-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component SAP_HR R/3 Standard Hu...|
| Release 46C From SAPKE46CF6 |
------------------------------------------------------------------------
Implement correction instructions of note 1507935.
This "manual" step has the correction instruction mentioned above as precondition and assures the implementation of note 1507935 when using the note assistant (SNOTE).
------------------------------------------------------------------------
|Manual Post-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component SAP_HRCDE SAP HR Germany |
| Release 470 From SAPK-47095INSAPHRCDE |
| Release 500 From SAPK-50061INSAPHRCDE |
| Release 600 From SAPK-60044INSAPHRCDE |
| Release 604 From SAPK-60410INSAPHRCDE |
------------------------------------------------------------------------
Implement correction instructions of note 1507935.
This "manual" step has the correction instruction mentioned above as precondition and assures the implementation of note 1507935 when using the note assistant (SNOTE).
Ссылки
