Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1694226-1)
SAP Support Packages
(SAPK-70133INVCBWTECH, SAPKW35030, SAPKW70029, SAPKW70112, SAPKW70212, SAPKW71110, SAPKW72008, SAPKW73008, SAPKW73104)
Описание
BW-PLA-BPS executes certain functions by referencing specific URLs. When an attacker tricks an authenticated user's browser into making a request containing a certain URL and specific parameters, the function is executed with the rights of the authenticated user.
The attacker may use a cross-site scripting attack to do this, or they may present a link to the victim.
The attacker may use a cross-site scripting attack to do this, or they may present a link to the victim.
Как исправить
Ссылки
