Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1637451-3)
SAP Support Packages
(SAPK-60211INEAAPPL, SAPK-60310INEAAPPL, SAPK-60411INEAAPPL, SAPK-60507INEAAPPL, SAPK-60602INEAAPPL, SAPKGPAD21)
Описание
Information such as credit card numbers can be discovered using DSD. This information may be used by an attacker
to target credit cards.
to target credit cards.
Как исправить
Implement the relevant Support Package that contains this SAP Note. Manual corrections are not required.
------------------------------------------------------------------------
|Manual Activity |
------------------------------------------------------------------------
|VALID FOR |
|Software Component EA-APPL SAP R/3 Enterpr...|
| Release 600 SAPKGPAD01 - SAPKGPAD20 |
| Release 602 Until SAPK-60210INEAAPPL |
| Release 603 Until SAPK-60309INEAAPPL |
| Release 604 SAPK-60401INEAAPPL - SAPK-60410INEAAPPL |
| Release 605 SAPK-60503INEAAPPL - SAPK-60506INEAAPPL |
| Release 606 SAPK-60601INEAAPPL - SAPK-60601INEAAPPL |
------------------------------------------------------------------------
This SAP Note contains enhancements of ABAP Dictionary objects. The SAP Note is therefore available only via the assigned Support Packages.
Proceed as follows to manually implement an advance correction:
Use the report RSWBO004 to set the name space /DSD/ and the software component EA-APPL to changeable.
Then use transaction SE11 to add the field below at the end of the
following database tables:
/DSD/HH_RAEC
/DSD/ME_PAYM_HD
/DSD/ME_REVN_HD
/DSD/ME_CUST_HD
Add the field CARD_GUID with the data element CARD_GUID to these.
Save the table.
Activate the table.
Use transaction SE11 to create the table type /DSD/ME_PAYM_HD_TT with the short text "DSD CN: Payments Received from Customer or Cash Collection" and the line type
/DSD/ME_PAYM_HD in the package /DSD/HH.
Save the table type.
Activate the table type.
Set the system change option back to its original status (report RSWBO004).
You can then use SNOTE to implement the source code corrections.
------------------------------------------------------------------------
|Manual Activity |
------------------------------------------------------------------------
|VALID FOR |
|Software Component EA-APPL SAP R/3 Enterpr...|
| Release 600 SAPKGPAD01 - SAPKGPAD20 |
| Release 602 Until SAPK-60210INEAAPPL |
| Release 603 Until SAPK-60309INEAAPPL |
| Release 604 SAPK-60401INEAAPPL - SAPK-60410INEAAPPL |
| Release 605 SAPK-60503INEAAPPL - SAPK-60506INEAAPPL |
| Release 606 SAPK-60601INEAAPPL - SAPK-60601INEAAPPL |
------------------------------------------------------------------------
This SAP Note contains enhancements of ABAP Dictionary objects. The SAP Note is therefore available only via the assigned Support Packages.
Proceed as follows to manually implement an advance correction:
Use the report RSWBO004 to set the name space /DSD/ and the software component EA-APPL to changeable.
Then use transaction SE11 to add the field below at the end of the
following database tables:
/DSD/HH_RAEC
/DSD/ME_PAYM_HD
/DSD/ME_REVN_HD
/DSD/ME_CUST_HD
Add the field CARD_GUID with the data element CARD_GUID to these.
Save the table.
Activate the table.
Use transaction SE11 to create the table type /DSD/ME_PAYM_HD_TT with the short text "DSD CN: Payments Received from Customer or Cash Collection" and the line type
/DSD/ME_PAYM_HD in the package /DSD/HH.
Save the table type.
Activate the table type.
Set the system change option back to its original status (report RSWBO004).
You can then use SNOTE to implement the source code corrections.
Ссылки
