Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
(AV:N/AC:L/Au:S/C:C/I:C/A:P)
Производитель ПО
Наименование ПО
SAP Notes
(1553907-2)
SAP Support Packages
(SAPKB70024, SAPKB70109, SAPKB70208, SAPKB71012, SAPKB71107, SAPKB72005, SAPKB73003)
Описание
Debugger infrastructure does not contain authorization checks for checking an authenticated user#s authorization to access some of its functions. This may result in undesired system behavior.
Как исправить
Please apply the support package mentioned in this note at least, or the coresponding correction instruction.
------------------------------------------------------------------------
|Manual Post-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component SAP_BASIS SAP Basis compo...|
| Release 730 Until SAPKB73002 |
------------------------------------------------------------------------
Add an authorization object to transaction SAS:
1. Start transaction SE93
2. Enter transaction code SAS
3. Press button 'Change'
4. You reached screen 'Change Dialog Transaction'. Enter S_DEVELOP in field authorization object
5. Press button 'Values'
6. In the pop-up 'Values of Check Object' enter the following values:
ACTVT 03
DEVCLASS *
OBJNAME *
OBJTYPE PROG
P_GROUP *
7. Press ok and afterwards save the changes (CTRL+S)
------------------------------------------------------------------------
|Manual Post-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component SAP_BASIS SAP Basis compo...|
| Release 711 Until SAPKB71106 |
------------------------------------------------------------------------
Add an authorization object to transaction SAS:
1. Start transaction SE93
2. Enter transaction code SAS
3. Press button 'Change'
4. You reached screen 'Change Dialog Transaction'. Enter S_DEVELOP in field authorization object
5. Press button 'Values'
6. In the pop-up 'Values of Check Object' enter the following values:
ACTVT 03
DEVCLASS *
OBJNAME *
OBJTYPE PROG
P_GROUP *
7. Press ok and afterwards save the changes (CTRL+S)
------------------------------------------------------------------------
|Manual Post-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component SAP_BASIS SAP Basis compo...|
| Release 710 Until SAPKB71011 |
------------------------------------------------------------------------
Add an authorization object to transaction SAS:
1. Start transaction SE93
2. Enter transaction code SAS
3. Press button 'Change'
4. You reached screen 'Change Dialog Transaction'. Enter S_DEVELOP in field authorization object
5. Press button 'Values'
6. In the pop-up 'Values of Check Object' enter the following values:
ACTVT 03
DEVCLASS *
OBJNAME *
OBJTYPE PROG
P_GROUP *
7. Press ok and afterwards save the changes (CTRL+S)
------------------------------------------------------------------------
|Manual Post-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component SAP_BASIS SAP Basis compo...|
| Release 702 Until SAPKB70207 |
------------------------------------------------------------------------
Add an authorization object to transaction SAS:
1. Start transaction SE93
2. Enter transaction code SAS
3. Press button 'Change'
4. You reached screen 'Change Dialog Transaction'. Enter S_DEVELOP in field authorization object
5. Press button 'Values'
6. In the pop-up 'Values of Check Object' enter the following values:
ACTVT 03
DEVCLASS *
OBJNAME *
OBJTYPE PROG
P_GROUP *
7. Press ok and afterwards save the changes (CTRL+S)
------------------------------------------------------------------------
|Manual Post-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component SAP_BASIS SAP Basis compo...|
| Release 720 Until SAPKB72004 |
------------------------------------------------------------------------
Add an authorization object to transaction SAS:
1. Start transaction SE93
2. Enter transaction code SAS
3. Press button 'Change'
4. You reached screen 'Change Dialog Transaction'. Enter S_DEVELOP in field authorization object
5. Press button 'Values'
6. In the pop-up 'Values of Check Object' enter the following values:
ACTVT 03
DEVCLASS *
OBJNAME *
OBJTYPE PROG
P_GROUP *
7. Press ok and afterwards save the changes (CTRL+S)
------------------------------------------------------------------------
|Manual Post-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component SAP_BASIS SAP Basis compo...|
| Release 730 Until SAPKB73002 |
------------------------------------------------------------------------
Add an authorization object to transaction SAS:
1. Start transaction SE93
2. Enter transaction code SAS
3. Press button 'Change'
4. You reached screen 'Change Dialog Transaction'. Enter S_DEVELOP in field authorization object
5. Press button 'Values'
6. In the pop-up 'Values of Check Object' enter the following values:
ACTVT 03
DEVCLASS *
OBJNAME *
OBJTYPE PROG
P_GROUP *
7. Press ok and afterwards save the changes (CTRL+S)
------------------------------------------------------------------------
|Manual Post-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component SAP_BASIS SAP Basis compo...|
| Release 711 Until SAPKB71106 |
------------------------------------------------------------------------
Add an authorization object to transaction SAS:
1. Start transaction SE93
2. Enter transaction code SAS
3. Press button 'Change'
4. You reached screen 'Change Dialog Transaction'. Enter S_DEVELOP in field authorization object
5. Press button 'Values'
6. In the pop-up 'Values of Check Object' enter the following values:
ACTVT 03
DEVCLASS *
OBJNAME *
OBJTYPE PROG
P_GROUP *
7. Press ok and afterwards save the changes (CTRL+S)
------------------------------------------------------------------------
|Manual Post-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component SAP_BASIS SAP Basis compo...|
| Release 710 Until SAPKB71011 |
------------------------------------------------------------------------
Add an authorization object to transaction SAS:
1. Start transaction SE93
2. Enter transaction code SAS
3. Press button 'Change'
4. You reached screen 'Change Dialog Transaction'. Enter S_DEVELOP in field authorization object
5. Press button 'Values'
6. In the pop-up 'Values of Check Object' enter the following values:
ACTVT 03
DEVCLASS *
OBJNAME *
OBJTYPE PROG
P_GROUP *
7. Press ok and afterwards save the changes (CTRL+S)
------------------------------------------------------------------------
|Manual Post-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component SAP_BASIS SAP Basis compo...|
| Release 702 Until SAPKB70207 |
------------------------------------------------------------------------
Add an authorization object to transaction SAS:
1. Start transaction SE93
2. Enter transaction code SAS
3. Press button 'Change'
4. You reached screen 'Change Dialog Transaction'. Enter S_DEVELOP in field authorization object
5. Press button 'Values'
6. In the pop-up 'Values of Check Object' enter the following values:
ACTVT 03
DEVCLASS *
OBJNAME *
OBJTYPE PROG
P_GROUP *
7. Press ok and afterwards save the changes (CTRL+S)
------------------------------------------------------------------------
|Manual Post-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component SAP_BASIS SAP Basis compo...|
| Release 720 Until SAPKB72004 |
------------------------------------------------------------------------
Add an authorization object to transaction SAS:
1. Start transaction SE93
2. Enter transaction code SAS
3. Press button 'Change'
4. You reached screen 'Change Dialog Transaction'. Enter S_DEVELOP in field authorization object
5. Press button 'Values'
6. In the pop-up 'Values of Check Object' enter the following values:
ACTVT 03
DEVCLASS *
OBJNAME *
OBJTYPE PROG
P_GROUP *
7. Press ok and afterwards save the changes (CTRL+S)
Ссылки
