Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1537663-1)
Описание
Как исправить
This note contains Java Correction(s) for Biller Direct.
The application shall not rely on the Invoker Servlet feature but use local servlets, i.e. defined in its own web.xml file only. In general the change can be done entirely in the web.xml file of the application.
Software Component: FSCM_BD
How to Change the web.xml file in FSCM_BD:
1, scan webbase-config.xml by key word "/servlet", you can find several items in the path tag such as <path>/servlet/BillDisplay</path>, these items are those need to be mapped in the file web.xml
2, open the file web.xml and append the following mapping text for each items you found in step 1.
<servlet-mapping>
<servlet-name>BillDisplay</servlet-name>
<url-pattern>/servlet/BillDisplay/*</url-pattern>
</servlet-mapping>
The application shall not rely on the Invoker Servlet feature but use local servlets, i.e. defined in its own web.xml file only. In general the change can be done entirely in the web.xml file of the application.
Software Component: FSCM_BD
How to Change the web.xml file in FSCM_BD:
1, scan webbase-config.xml by key word "/servlet", you can find several items in the path tag such as <path>/servlet/BillDisplay</path>, these items are those need to be mapped in the file web.xml
2, open the file web.xml and append the following mapping text for each items you found in step 1.
<servlet-mapping>
<servlet-name>BillDisplay</servlet-name>
<url-pattern>/servlet/BillDisplay/*</url-pattern>
</servlet-mapping>
Ссылки
