Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1511114-4)
SAP Support Packages
(SAPK-60209INEAAPPL, SAPK-60308INEAAPPL, SAPK-60409INEAAPPL, SAPK-60503INEAAPPL, SAPKGPAA32, SAPKGPAB21, SAPKGPAC24, SAPKGPAD19)
Описание
The programs contained in the correction instructions contain
vulnerabilities through which a malicious user can potentially read
arbitrary files on the remote server, possibly disclosing confidential
information.
Some of the programs contained in the correction instructions contain a
vulnerability through which a malicious user can potentially write
arbitrary files on the remote server, possibly corrupting data or
altering system behavior.
vulnerabilities through which a malicious user can potentially read
arbitrary files on the remote server, possibly disclosing confidential
information.
Some of the programs contained in the correction instructions contain a
vulnerability through which a malicious user can potentially write
arbitrary files on the remote server, possibly corrupting data or
altering system behavior.
Как исправить
Please refer to note 1497003 for additional information and
instructions. The corrections from note 1497003 are a prerequisite for
implementation of this note.
Logical File Names Used in this Solution
----------------------------------------
The following logical file names have been created in order to enable
the validation of physical file names:
* ICM_FILE_PATH_NAME
Logical File Paths Used in this Solution
-----------------------------------------
The logical file names listed above all use the logical file path
ICM_FILE_PATH.
------------------------------------------------------------------------
|Manual Pre-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component EA-APPL SAP R/3 Enterpr...|
| Release 110 Until SAPKGPAA31 |
| Release 200 Until SAPKGPAB20 |
| Release 500 Until SAPKGPAC23 |
| Release 600 Until SAPKGPAD18 |
| Release 602 Until SAPK-60208INEAAPPL |
| Release 603 Until SAPK-60307INEAAPPL |
| Release 604 Until SAPK-60408INEAAPPL |
| Release 605 Until SAPK-60502INEAAPPL |
------------------------------------------------------------------------
Instructions to create a logical path name:
1)Go to transaction FILE.
2) In the dialog structure double-click Logical File Path Definition
3) Choose function New Entries.
4) For 'Logical file' field enter value 'ICM_FILE_PATH' and for field
'Name' enter value 'ICM file path for EDT files.'
Instructions to create a logical file name:
-------------------------------------------
1) Go to transaction FILE.
2) In the dialog structure double-click Logical File Name Definition,
Cross-Client
3) Choose function New Entries.
4) Enter the values according to the template below:
Field Required Input
-------------------------------------
Logical file ICM_FILE_PATH_NAME
Name ICM Filepath for upload and download EDT files.
Physical file
Data format DIR
Application area CA
Logical path ICM_FILE_PATH
------------------------------------------------------------------------
|Manual Post-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component EA-APPL SAP R/3 Enterpr...|
| Release 110 Until SAPKGPAA31 |
| Release 200 Until SAPKGPAB20 |
| Release 500 Until SAPKGPAC23 |
| Release 600 Until SAPKGPAD18 |
| Release 602 Until SAPK-60208INEAAPPL |
| Release 603 Until SAPK-60307INEAAPPL |
| Release 604 Until SAPK-60408INEAAPPL |
| Release 605 Until SAPK-60502INEAAPPL |
------------------------------------------------------------------------
Re-generate the ICM application for the changes to get reflected.
instructions. The corrections from note 1497003 are a prerequisite for
implementation of this note.
Logical File Names Used in this Solution
----------------------------------------
The following logical file names have been created in order to enable
the validation of physical file names:
* ICM_FILE_PATH_NAME
Logical File Paths Used in this Solution
-----------------------------------------
The logical file names listed above all use the logical file path
ICM_FILE_PATH.
------------------------------------------------------------------------
|Manual Pre-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component EA-APPL SAP R/3 Enterpr...|
| Release 110 Until SAPKGPAA31 |
| Release 200 Until SAPKGPAB20 |
| Release 500 Until SAPKGPAC23 |
| Release 600 Until SAPKGPAD18 |
| Release 602 Until SAPK-60208INEAAPPL |
| Release 603 Until SAPK-60307INEAAPPL |
| Release 604 Until SAPK-60408INEAAPPL |
| Release 605 Until SAPK-60502INEAAPPL |
------------------------------------------------------------------------
Instructions to create a logical path name:
1)Go to transaction FILE.
2) In the dialog structure double-click Logical File Path Definition
3) Choose function New Entries.
4) For 'Logical file' field enter value 'ICM_FILE_PATH' and for field
'Name' enter value 'ICM file path for EDT files.'
Instructions to create a logical file name:
-------------------------------------------
1) Go to transaction FILE.
2) In the dialog structure double-click Logical File Name Definition,
Cross-Client
3) Choose function New Entries.
4) Enter the values according to the template below:
Field Required Input
-------------------------------------
Logical file ICM_FILE_PATH_NAME
Name ICM Filepath for upload and download EDT files.
Physical file
Data format DIR
Application area CA
Logical path ICM_FILE_PATH
------------------------------------------------------------------------
|Manual Post-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component EA-APPL SAP R/3 Enterpr...|
| Release 110 Until SAPKGPAA31 |
| Release 200 Until SAPKGPAB20 |
| Release 500 Until SAPKGPAC23 |
| Release 600 Until SAPKGPAD18 |
| Release 602 Until SAPK-60208INEAAPPL |
| Release 603 Until SAPK-60307INEAAPPL |
| Release 604 Until SAPK-60408INEAAPPL |
| Release 605 Until SAPK-60502INEAAPPL |
------------------------------------------------------------------------
Re-generate the ICM application for the changes to get reflected.
Ссылки
