Note 1692691 - Missing authorization check in CRM-ISA-BBS

Уровень опасности

Низкая (0.0)

Оценка CVSS

Производитель ПО

SAP

Наименование ПО

SAP Notes (1692691-2) SAP Support Packages (CRM_JAVA_APPLICATIONS_50_SP019_000022, CRM_JAVA_APPLICATIONS_50_SP999999_999999, CRM_JAVA_APPLICATIONS_60_SP009_000019, CRM_JAVA_APPLICATIONS_60_SP999999_999999, CRM_JAVA_APPLICATIONS_70_SP010_000021, CRM_JAVA_APPLICATIONS_70_SP999999_999999, CRM_JAVA_APPLICATIONS_701_SP007_000005, CRM_JAVA_APPLICATIONS_701_SP999999_999999, CRM_JAVA_APPLICATIONS_702_SP002_000001, CRM_JAVA_APPLICATIONS_702_SP999999_999999, CRM_JAVA_APPLICATIONS_730_SP000_000028, CRM_JAVA_APPLICATIONS_730_SP999999_999999, CRM_JAVA_APPLICATIONS_731_SP000_000006, CRM_JAVA_APPLICATIONS_731_SP999999_999999, CRM_JAVA_APPLICATIONS_732_SP002_000001, CRM_JAVA_APPLICATIONS_732_SP999999_999999, CRM_JAVA_COMPONENTS_50_SP019_000022, CRM_JAVA_COMPONENTS_50_SP999999_999999, CRM_JAVA_COMPONENTS_60_SP009_000019, CRM_JAVA_COMPONENTS_60_SP999999_999999, CRM_JAVA_COMPONENTS_70_SP010_000021, CRM_JAVA_COMPONENTS_70_SP999999_999999, CRM_JAVA_COMPONENTS_701_SP007_000005, CRM_JAVA_COMPONENTS_701_SP999999_999999, CRM_JAVA_COMPONENTS_702_SP002_000001, CRM_JAVA_COMPONENTS_702_SP999999_999999, CRM_JAVA_COMPONENTS_730_SP000_000028, CRM_JAVA_COMPONENTS_730_SP999999_999999, CRM_JAVA_COMPONENTS_731_SP000_000006, CRM_JAVA_COMPONENTS_731_SP999999_999999, CRM_JAVA_COMPONENTS_732_SP002_000001, CRM_JAVA_COMPONENTS_732_SP999999_999999, CRM_JAVA_WEB_COMPONENTS_50_SP019_000022, CRM_JAVA_WEB_COMPONENTS_50_SP999999_999999, CRM_JAVA_WEB_COMPONENTS_60_SP009_000019, CRM_JAVA_WEB_COMPONENTS_60_SP999999_999999, CRM_JAVA_WEB_COMPONENTS_70_SP010_000021, CRM_JAVA_WEB_COMPONENTS_70_SP999999_999999, CRM_JAVA_WEB_COMPONENTS_701_SP007_000005, CRM_JAVA_WEB_COMPONENTS_701_SP999999_999999, CRM_JAVA_WEB_COMPONENTS_702_SP002_000001, CRM_JAVA_WEB_COMPONENTS_702_SP999999_999999, CRM_JAVA_WEB_COMPONENTS_730_SP000_000028, CRM_JAVA_WEB_COMPONENTS_730_SP999999_999999, CRM_JAVA_WEB_COMPONENTS_731_SP000_000006, CRM_JAVA_WEB_COMPONENTS_731_SP999999_999999, CRM_JAVA_WEB_COMPONENTS_732_SP002_000001, CRM_JAVA_WEB_COMPONENTS_732_SP999999_999999, SAP_SHARED_JAVA_APPLIC_50_SP019_000022, SAP_SHARED_JAVA_APPLIC_50_SP999999_999999, SAP_SHARED_JAVA_APPLIC_60_SP009_000019, SAP_SHARED_JAVA_APPLIC_60_SP999999_999999, SAP_SHARED_JAVA_APPLIC_70_SP010_000021, SAP_SHARED_JAVA_APPLIC_70_SP999999_999999, SAP_SHARED_JAVA_APPLIC_701_SP007_000005, SAP_SHARED_JAVA_APPLIC_701_SP999999_999999, SAP_SHARED_JAVA_APPLIC_702_SP002_000001, SAP_SHARED_JAVA_APPLIC_702_SP999999_999999, SAP_SHARED_JAVA_APPLIC_730_SP000_000028, SAP_SHARED_JAVA_APPLIC_730_SP999999_999999, SAP_SHARED_JAVA_APPLIC_731_SP000_000006, SAP_SHARED_JAVA_APPLIC_731_SP999999_999999, SAP_SHARED_JAVA_APPLIC_732_SP002_000001, SAP_SHARED_JAVA_APPLIC_732_SP999999_999999, SAP_SHARED_JAVA_COMP_701_SP007_000005, SAP_SHARED_JAVA_COMP_701_SP999999_999999, SAP_SHARED_JAVA_COMP_702_SP002_000001, SAP_SHARED_JAVA_COMP_702_SP999999_999999, SAP_SHARED_JAVA_COMP_730_SP000_000028, SAP_SHARED_JAVA_COMP_730_SP999999_999999, SAP_SHARED_JAVA_COMP_731_SP000_000006, SAP_SHARED_JAVA_COMP_731_SP999999_999999, SAP_SHARED_JAVA_COMP_732_SP002_000001, SAP_SHARED_JAVA_COMP_732_SP999999_999999, SAP_SHARED_JAVA_COMPONENTS_50_SP019_000022, SAP_SHARED_JAVA_COMPONENTS_50_SP999999_999999, SAP_SHARED_JAVA_COMPONENTS_60_SP009_000019, SAP_SHARED_JAVA_COMPONENTS_60_SP999999_999999, SAP_SHARED_JAVA_COMPONENTS_70_SP010_000021, SAP_SHARED_JAVA_COMPONENTS_70_SP999999_999999, SAP_SHARED_WEB_COMPONENTS_50_SP019_000022, SAP_SHARED_WEB_COMPONENTS_50_SP999999_999999, SAP_SHARED_WEB_COMPONENTS_60_SP009_000019, SAP_SHARED_WEB_COMPONENTS_60_SP999999_999999, SAP_SHARED_WEB_COMPONENTS_70_SP010_000021, SAP_SHARED_WEB_COMPONENTS_70_SP999999_999999, SAP_SHARED_WEB_COMPONENTS_701_SP007_000005, SAP_SHARED_WEB_COMPONENTS_701_SP999999_999999, SAP_SHARED_WEB_COMPONENTS_702_SP002_000001, SAP_SHARED_WEB_COMPONENTS_702_SP999999_999999, SAP_SHARED_WEB_COMPONENTS_730_SP000_000028, SAP_SHARED_WEB_COMPONENTS_730_SP999999_999999, SAP_SHARED_WEB_COMPONENTS_731_SP000_000006, SAP_SHARED_WEB_COMPONENTS_731_SP999999_999999, SAP_SHARED_WEB_COMPONENTS_732_SP002_000001, SAP_SHARED_WEB_COMPONENTS_732_SP999999_999999)

Описание

CRM-ISA-BBS does not contain authorization checks for checking an authenticated user's authorization to access some of its functions. This may result in undesired system behavior.

Как исправить

This note contains Java Correction(s) for E-Commerce / Web Channel.

Software component: sap.com_SAP-SHRJAV
Development Component: sap.com/crm/isa/isacore

Please implement the SP Patch Level attached to this note.

For further information on installing Java Patches consult note 877887.
Information about the patch strategy can be found in note 1546959.

Ссылки

Назад к списку уязвимостей

Note 1692691 - Missing authorization check in CRM-ISA-BBS

Карточка уязвимости

Характеристики уязвимости