Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1524781-3)
SAP Support Packages
(SAPKH31IB9, SAPKH40B89, SAPKH45B67, SAPKH46B62, SAPKH46C62, SAPKH47036, SAPKH50025, SAPKH60019, SAPKH60209, SAPKH60308, SAPKH60409, SAPKH60504)
Описание
Some of the programs specified in the correction instructions fail to correctly validate the path to which a user-submitted file is written.
As a result, a malicious user can potentially overwrite data in the remote system
or overwrite existing data.
For additional information and instructions, see Note 1497003. The corrections provided in Note 1497003 are a prerequisite for implementing this note.
As a result, a malicious user can potentially overwrite data in the remote system
or overwrite existing data.
For additional information and instructions, see Note 1497003. The corrections provided in Note 1497003 are a prerequisite for implementing this note.
Как исправить
Implement the corrections.
Ссылки
