Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
(AV:N/AC:M/Au:N/C:N/I:P/A:N)
Производитель ПО
Наименование ПО
SAP Notes
(1556749-4)
SAP Support Packages
(SAPKB64028, SAPKB70024, SAPKB70109, SAPKB70208, SAPKB71012, SAPKB71107, SAPKB72005, SAPKB73003)
Описание
SAP Business Workflow executes certain functions by referencing specific URLs. When a malicious user tricks an authenticated user#s browser into making a request containing a certain URL and specific parameters, the function is executed with the rights of the authenticated user.
The malicious user may use a cross-site scripting attack to do this, or they may present a link to the victim.
The malicious user may use a cross-site scripting attack to do this, or they may present a link to the victim.
Как исправить
Implement the correction instructions contained in this note regardless of whether you use SAP Business Workflow or not.
Ссылки
