Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1519330-4)
SAP Support Packages
(SAPKU50018, SAPKU51006, SAPKU52011, SAPKU60009, SAPKU70009, SAPKU70103)
Описание
Healthcare business partner lacks permission checks for an authenticated user's authorization to access some of its functionality. This may result in undesired system behavior.
Как исправить
Please follow the manual steps provided.
------------------------------------------------------------------------
|Manual Pre-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component BBPCRM BBP / CRM |
| Release 500 SAPKU50001 - SAPKU50017 |
| Release 510 SAPKU51001 - SAPKU51005 |
| Release 520 SAPKU52001 - SAPKU52010 |
| Release 700 SAPKU70001 - SAPKU70008 |
| Release 600 SAPKU60001 - SAPKU60008 |
| Release 701 SAPKU70101 - SAPKU70102 |
------------------------------------------------------------------------
1. Go to transaction SE11 and choose database table's radio button.
2. Repeat the step 3 to 8 for each of the following tables
ISH_NEG_FOODC
ISH_PREF_FOODC
ISH_RISKC
ISH_INSTYPEC
ISH_MEMBTYPEC
ISH_RESPTYPEC
3. In the field "Database table", enter the table name as listed above.
4. Click on the button "Display".
5. From the menu "Utilities", select "Assign Authorization Group".
6. From the menu "Table View", select "Display -> Change".
7. In the column "Authorization" associated to the corresponding table , change the value from "&NC&" to "CRMC".
8. Save.
------------------------------------------------------------------------
|Manual Pre-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component BBPCRM BBP / CRM |
| Release 500 SAPKU50001 - SAPKU50017 |
| Release 510 SAPKU51001 - SAPKU51005 |
| Release 520 SAPKU52001 - SAPKU52010 |
| Release 700 SAPKU70001 - SAPKU70008 |
| Release 600 SAPKU60001 - SAPKU60008 |
| Release 701 SAPKU70101 - SAPKU70102 |
------------------------------------------------------------------------
1. Go to transaction SE11 and choose database table's radio button.
2. Repeat the step 3 to 8 for each of the following tables
ISH_NEG_FOODC
ISH_PREF_FOODC
ISH_RISKC
ISH_INSTYPEC
ISH_MEMBTYPEC
ISH_RESPTYPEC
3. In the field "Database table", enter the table name as listed above.
4. Click on the button "Display".
5. From the menu "Utilities", select "Assign Authorization Group".
6. From the menu "Table View", select "Display -> Change".
7. In the column "Authorization" associated to the corresponding table , change the value from "&NC&" to "CRMC".
8. Save.
Ссылки
