Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1562119-5)
Описание
Certain correction instructions are missing in Security Note 1523808. [The implementation of Security Note 1523808 is a prerequisite for this note.]
CATT or eCATT does not contain authorization checks for checking an authenticated user#s authorization to access the function module CAT_CHECK_TABLE. Without these checks, an authenticated user may simply call these functions, which may result in undesired system behavior.
However, Note 1523808 checks all remote accesses for authorization (even those calls required by CATT or eCATT). This note checks the remote accesses that are required by CATT or eCATT via a central authorization.
CATT or eCATT does not contain authorization checks for checking an authenticated user#s authorization to access the function module CAT_CHECK_TABLE. Without these checks, an authenticated user may simply call these functions, which may result in undesired system behavior.
However, Note 1523808 checks all remote accesses for authorization (even those calls required by CATT or eCATT). This note checks the remote accesses that are required by CATT or eCATT via a central authorization.
Как исправить
Implement the correction instructions or import the relevant Support Packages as follows:
- SAP_BASIS 730 Support Package 03
- SAP_BASIS 720 Support Package 05
- SAP_BASIS 711 Support Package 07
- SAP_BASIS 710 Support Package 12
- SAP_BASIS 702 Support Package 08
- SAP_BASIS 701 Support Package 09
- SAP_BASIS 700 Support Package 24
- SAP_BASIS 640 Support Package 28
- SAP_BASIS 620 Support Package 70
- SAP_BASIS 730 Support Package 03
- SAP_BASIS 720 Support Package 05
- SAP_BASIS 711 Support Package 07
- SAP_BASIS 710 Support Package 12
- SAP_BASIS 702 Support Package 08
- SAP_BASIS 701 Support Package 09
- SAP_BASIS 700 Support Package 24
- SAP_BASIS 640 Support Package 28
- SAP_BASIS 620 Support Package 70
Ссылки
