Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1513064-3)
SAP Support Packages
(SAPKB46B62, SAPKB46C62, SAPKB62070, SAPKB64027, SAPKB70023, SAPKB70108, SAPKB70206, SAPKB70207, SAPKB71012, SAPKB71107, SAPKB72004, SAPKB73001, SAPKB73002)
Описание
The function in BC-CTS-LAN fails to correctly validate the path a user-submitted file is written to. This means that an attacker can potentially delete files on the remote system.
Как исправить
Use the SAP Note Assistant to implement the correction instructions, or import the relevant Support Package.
Ссылки