Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1699075-1)
SAP Support Packages
(SAPKB46C64, SAPKB62072, SAPKB64030, SAPKB70027, SAPKB70112, SAPKB70212, SAPKB71015, SAPKB71110, SAPKB72008, SAPKB73008, SAPKB73105)
Описание
The program code contains a possibility to define and execute user-defined code that changes the behavior of the system. A valid and an authenticated user is required.
Depending on the code, the user can:
inject and run their own code,
obtain additional information that should not be displayed,
modify data, delete data,
modify the output of the system,
create new users with higher privileges,
perform a denial of service attack.
Depending on the code, the user can:
inject and run their own code,
obtain additional information that should not be displayed,
modify data, delete data,
modify the output of the system,
create new users with higher privileges,
perform a denial of service attack.
Как исправить
Implement the correction instructions using the Note Assistant and then run the report RSTLAN_DELETE_PROG.
------------------------------------------------------------------------
|Manual Pre-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component SAP_BASIS SAP Basis compo...|
| Release 46C Until SAPKB46C63 |
| Release 620 Until SAPKB62071 |
| Release 640 Until SAPKB64029 |
------------------------------------------------------------------------
In transaction SE38, create the report RSTLAN_DELETE_PROG and enter the source code from this SAP Note (for example, using the Note Assistant). Activate the source code and execute it.
------------------------------------------------------------------------
|Manual Pre-Implement. |
------------------------------------------------------------------------
|VALID FOR |
|Software Component SAP_BASIS SAP Basis compo...|
| Release 46C Until SAPKB46C63 |
| Release 620 Until SAPKB62071 |
| Release 640 Until SAPKB64029 |
------------------------------------------------------------------------
In transaction SE38, create the report RSTLAN_DELETE_PROG and enter the source code from this SAP Note (for example, using the Note Assistant). Activate the source code and execute it.
Ссылки
