Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1510725-4)
SAP Support Packages
(SAPK-31219INCPROJECT, SAPK-31419INCPROJECT, SAPK-40019INCPRXRPM, SAPK-45010INCPRXRPM, SAPK-50004INCPRXRPM)
Описание
1. PLM-CFO lacks permission checks for an authenticated users authorization to access some of its functionality. This may result in undesired system behavior.
2. There are test pages on the PLM-CFO which are not needed for productive use. Test pages can contain debug code or code which was only used for testing purposes without a concern for security. Often these pages are no longer maintained, so errors wonot get fixed.
2. There are test pages on the PLM-CFO which are not needed for productive use. Test pages can contain debug code or code which was only used for testing purposes without a concern for security. Often these pages are no longer maintained, so errors wonot get fixed.
Как исправить
For Symptom 1: Please apply the correction instruction and
For Symptom 2: Follow the given mannual instruction
Delete Following pages from BSP Application 'CFX_RFC_UI':
1. TMP_XSLT_TEST.XML
2. TMP_TYPES.HTM
3. TMP_TEST.HTM
4. TMP_TEMPLATE.HTM
5. TMP_EURO_BUG.HTM
------------------------------------------------------------------------
|Manual Post-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component CPROJECTS cProject Suite |
| Release 310_620 Until SAPK-31218INCPROJECT |
| Release 310_640 Until SAPK-31418INCPROJECT |
------------------------------------------------------------------------
Delete Following pages from BSP Application 'CFX_RFC_UI':
1. TMP_XSLT_TEST.XML
2. TMP_TYPES.HTM
3. TMP_TEST.HTM
4. TMP_TEMPLATE.HTM
5. TMP_EURO_BUG.HTM
------------------------------------------------------------------------
|Manual Post-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component CPRXRPM SAP Project Por...|
| Release 500_702 SAPK-50001INCPRXRPM - SAPK-50003INCPRXRPM |
------------------------------------------------------------------------
Delete Following pages from BSP Application 'CFX_RFC_UI':
1. TMP_XSLT_TEST.XML
2. TMP_TYPES.HTM
3. TMP_TEST.HTM
4. TMP_TEMPLATE.HTM
5. TMP_EURO_BUG.HTM
------------------------------------------------------------------------
|Manual Post-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component CPRXRPM SAP Project Por...|
| Release 450_700 Until SAPK-45009INCPRXRPM |
------------------------------------------------------------------------
Delete Following pages from BSP Application 'CFX_RFC_UI':
1. TMP_XSLT_TEST.XML
2. TMP_TYPES.HTM
3. TMP_TEST.HTM
4. TMP_TEMPLATE.HTM
5. TMP_EURO_BUG.HTM
------------------------------------------------------------------------
|Manual Post-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component CPRXRPM SAP Project Por...|
| Release 400 Until SAPK-40018INCPRXRPM |
------------------------------------------------------------------------
Delete Following pages from BSP Application 'CFX_RFC_UI':
1. TMP_XSLT_TEST.XML
2. TMP_TYPES.HTM
3. TMP_TEST.HTM
4. TMP_TEMPLATE.HTM
5. TMP_EURO_BUG.HTM
For Symptom 2: Follow the given mannual instruction
Delete Following pages from BSP Application 'CFX_RFC_UI':
1. TMP_XSLT_TEST.XML
2. TMP_TYPES.HTM
3. TMP_TEST.HTM
4. TMP_TEMPLATE.HTM
5. TMP_EURO_BUG.HTM
------------------------------------------------------------------------
|Manual Post-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component CPROJECTS cProject Suite |
| Release 310_620 Until SAPK-31218INCPROJECT |
| Release 310_640 Until SAPK-31418INCPROJECT |
------------------------------------------------------------------------
Delete Following pages from BSP Application 'CFX_RFC_UI':
1. TMP_XSLT_TEST.XML
2. TMP_TYPES.HTM
3. TMP_TEST.HTM
4. TMP_TEMPLATE.HTM
5. TMP_EURO_BUG.HTM
------------------------------------------------------------------------
|Manual Post-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component CPRXRPM SAP Project Por...|
| Release 500_702 SAPK-50001INCPRXRPM - SAPK-50003INCPRXRPM |
------------------------------------------------------------------------
Delete Following pages from BSP Application 'CFX_RFC_UI':
1. TMP_XSLT_TEST.XML
2. TMP_TYPES.HTM
3. TMP_TEST.HTM
4. TMP_TEMPLATE.HTM
5. TMP_EURO_BUG.HTM
------------------------------------------------------------------------
|Manual Post-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component CPRXRPM SAP Project Por...|
| Release 450_700 Until SAPK-45009INCPRXRPM |
------------------------------------------------------------------------
Delete Following pages from BSP Application 'CFX_RFC_UI':
1. TMP_XSLT_TEST.XML
2. TMP_TYPES.HTM
3. TMP_TEST.HTM
4. TMP_TEMPLATE.HTM
5. TMP_EURO_BUG.HTM
------------------------------------------------------------------------
|Manual Post-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component CPRXRPM SAP Project Por...|
| Release 400 Until SAPK-40018INCPRXRPM |
------------------------------------------------------------------------
Delete Following pages from BSP Application 'CFX_RFC_UI':
1. TMP_XSLT_TEST.XML
2. TMP_TYPES.HTM
3. TMP_TEST.HTM
4. TMP_TEMPLATE.HTM
5. TMP_EURO_BUG.HTM
Ссылки
