Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
(AV:N/AC:M/AU:S/C:P/I:N/A:N)
Производитель ПО
Наименование ПО
SAP Notes
(1572714-3)
SAP Support Packages
(SAPKB46B62, SAPKB46C62, SAPKB62070, SAPKB64028, SAPKB70025, SAPKB70110, SAPKB70208, SAPKB71013, SAPKB71107, SAPKB72005, SAPKB73003, SAPKH45B67)
Описание
The Profile Maintenance lacks permission checks for an authenticated users authorization to access some of its functionality. This may result in undesired system behavior.
Как исправить
Please apply the support package mentioned in this note at least, or the respective correction instruction.
------------------------------------------------------------------------
|Manual Pre-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component SAP_APPL SAP Application |
| Release 45B Until SAPKH45B66 |
------------------------------------------------------------------------
Prior to applying the code changes, the following actions are necessary:
1. Start /nSE37, enter module PFL_GET_PARAMETER, go to change mode. Choose tab "Exceptions", and add exception AUTHORIZATION_MISSING. Save, and activate.
2. Start /nSE37, enter module PFL_GET_PARAMETER, press Copy. For the new module name, enter PFL_GET_PARAMETER_LOCAL.
After the copy has been created, press Change in order to change the new function module.
Choose tab "Properties". Select radio botton "Normal Function Module" (rather than "RFC-Enabled").
------------------------------------------------------------------------
|Manual Pre-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component SAP_BASIS SAP Basis compo...|
| Release 610 Until SAPKB61047 |
| Release 46C SAPKB46C53 - SAPKB46C61 |
| Release 46B SAPKB46B44 - SAPKB46B61 |
| Release 46D SAPKB46D15 - SAPKB46D44 |
------------------------------------------------------------------------
Prior to applying the code changes, the following actions are necessary:
1. Start /nSE37, enter module PFL_GET_PARAMETER, go to change mode. Choose tab "Exceptions", and add exception AUTHORIZATION_MISSING. Save, and activate.
2. Start /nSE37, enter module PFL_GET_PARAMETER, press Copy. For the new module name, enter PFL_GET_PARAMETER_LOCAL.
After the copy has been created, press Change in order to change the new function module.
Choose tab "Properties". Select radio botton "Normal Function Module" (rather than "RFC-Enabled").
------------------------------------------------------------------------
|Manual Pre-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component SAP_APPL SAP Application |
| Release 45B Until SAPKH45B66 |
------------------------------------------------------------------------
Prior to applying the code changes, the following actions are necessary:
1. Start /nSE37, enter module PFL_GET_PARAMETER, go to change mode. Choose tab "Exceptions", and add exception AUTHORIZATION_MISSING. Save, and activate.
2. Start /nSE37, enter module PFL_GET_PARAMETER, press Copy. For the new module name, enter PFL_GET_PARAMETER_LOCAL.
After the copy has been created, press Change in order to change the new function module.
Choose tab "Properties". Select radio botton "Normal Function Module" (rather than "RFC-Enabled").
------------------------------------------------------------------------
|Manual Pre-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component SAP_BASIS SAP Basis compo...|
| Release 610 Until SAPKB61047 |
| Release 46C SAPKB46C53 - SAPKB46C61 |
| Release 46B SAPKB46B44 - SAPKB46B61 |
| Release 46D SAPKB46D15 - SAPKB46D44 |
------------------------------------------------------------------------
Prior to applying the code changes, the following actions are necessary:
1. Start /nSE37, enter module PFL_GET_PARAMETER, go to change mode. Choose tab "Exceptions", and add exception AUTHORIZATION_MISSING. Save, and activate.
2. Start /nSE37, enter module PFL_GET_PARAMETER, press Copy. For the new module name, enter PFL_GET_PARAMETER_LOCAL.
After the copy has been created, press Change in order to change the new function module.
Choose tab "Properties". Select radio botton "Normal Function Module" (rather than "RFC-Enabled").
Ссылки