Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1537299-1)
SAP Support Packages
(SAPK-470B5INSAPHRCUS, SAPK-50081INSAPHRCUS, SAPK-60064INSAPHRCUS, SAPK-60430INSAPHRCUS)
Описание
HR Distributed-Reporting does not contain authorization checks for checking an authenticated user's authorization to access some of its functions. This may result in undesired system behavior.
Как исправить
This note implements a call to Business Add-In HRPAD00AUTH_DIST with a default implementation restricting the executable reports to reports using HR logical databases. This Business Add-In is delivered with note 1531288. Please follow the instructions given there.
Then, implement the corresponding Support Package. As alternative implement the corresponding correction instructions.
The relationship between the technical name and the HR Support Package can be found in SAP note 1232082.
Then, implement the corresponding Support Package. As alternative implement the corresponding correction instructions.
The relationship between the technical name and the HR Support Package can be found in SAP note 1232082.
Ссылки
