Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1512396-3)
SAP Support Packages
(SAPK-60025INISH, SAPK-60214INISH, SAPK-60314INISH, SAPK-60415INISH, SAPK-60504INISH, SAPKIPHD56, SAPKIPHF40)
Описание
The report contains a vulnerability through which a malicious user can potentially write/delete arbitrary files on the remote server, possibly corrupting data or altering system behavior.
Как исправить
Please refer to note 1497003 for additional information and instructions. The corrections from note 1497003 are a prerequisite for implementation of this note.
The logical file N2UX_BASE has been created in order to enable the validation of physical file names. User supplied file paths and filenames are validated against this logical filename.
The logical file N2UX_BASE has been created in order to enable the validation of physical file names. User supplied file paths and filenames are validated against this logical filename.
Ссылки
