Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1508060-5)
SAP Support Packages
(SAPKH60409, SAPKH60503, SAPKH60504)
Описание
Billing Consolidation Connector fails to correctly validate the path a user-submitted file is written to. Through this, an attacker can potentially overwrite data on the remote system.
Как исправить
Apply support package or correction instructions.
Authority check will take place for EDX reports. Only user with role "SAP_EDX" can use the report.
Additionally logical file names are now used to validate the access to the application server file system.
Please refer to note 1497003 for additional information and instructions. The corrections from note 1497003 are a prerequisite for implementation of this note.
Authority check will take place for EDX reports. Only user with role "SAP_EDX" can use the report.
Additionally logical file names are now used to validate the access to the application server file system.
Please refer to note 1497003 for additional information and instructions. The corrections from note 1497003 are a prerequisite for implementation of this note.
Ссылки
