Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1732768-1)
Описание
Information Steward executes certain functions by referencing specific URLs. When an attacker tricks an authenticated user's browser into making a request containing a certain URL and specific parameters, the function is executed with the rights of the authenticated user. The attacker may use a cross-site scripting attack to do this, or they may present a link to the victim.
Как исправить
The vulnerability is fixed in SAP Information Steward 4.1 patch 1 and SBOP Information Steward 4.0 SP03
Ссылки
