Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(842915-4)
SAP Support Packages
(SAPKB46B59, SAPKB46C51, SAPKB46D41, SAPKB61044, SAPKB62052, SAPKB64013, SAPKB70002, SAPKH40B86, SAPKH45B64)
Описание
For technical reasons, transaction SUB% is required by certain functions of ABAP-based SAP systems (including SAP shortcuts) to start reports or transactions. However, transaction SUB% can also be started by users directly if their authorization (authorization object S_TCODE) permits this.
Due to a program error,there is no check in transaction SUB% to determine whether the user has the authorizations required to execute the transactions to be started.
Due to a program error,there is no check in transaction SUB% to determine whether the user has the authorizations required to execute the transactions to be started.
Как исправить
Implement the corrections attached to this note or import the specified Support Packages.
Ссылки
