Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1511571-3)
SAP Support Packages
(SAPK-70103INSRMSRV, SAPKIBKS17, SAPKIBKT18, SAPKIBKU06, SAPKIBKV10)
Описание
SRM-SUS lacks permission checks for an authenticated user's authorization to access some of its functionality. This may result in undesired system behavior.
Как исправить
Please implement the attached corrections or apply the appropriate Support package as indicated.
Solution Details:
Server side restrictions were implemented to forbid unauthorized search requests. When submitting tampered requests the server will deny the request and display an error message.
Solution Details:
Server side restrictions were implemented to forbid unauthorized search requests. When submitting tampered requests the server will deny the request and display an error message.
Ссылки
