Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
(AV:N/AC:M/AU:S/C:P/I:P/A:P)
Производитель ПО
Наименование ПО
SAP Notes
(1728500-5)
SAP Support Packages
(SAPKB62073, SAPKB64031, SAPKB70028, SAPKB70112, SAPKB70212, SAPKB71016, SAPKB71110, SAPKB72008, SAPKB73008, SAPKB73105)
Описание
SOAP Processor 620 executes certain functions by referencing specific URLs. When an attacker tricks an authenticated user's browser into making a request containing a certain URL and specific parameters, the function is executed with the rights of the authenticated user. The attacker may use a cross-site scripting attack to do this, or they may present a link to the victim.
Как исправить
Please apply attached correction to solve the problem
Ссылки
