Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1681513-10)
SAP Support Packages
(SAPKH46C64, SAPKH47038, SAPKH50027, SAPKH60022, SAPKH60211, SAPKH60310, SAPKH60411, SAPKH60508, SAPKH60603)
Описание
FI-SL-SL-G or FI-GL-GL-G does not contain authorization checks for checking an authenticated user#s authorization to access some of its functions. This may result in undesired system behavior.
Как исправить
Implement the attached correction instructions including the postprocessing steps, or import the relevant Support Package.
------------------------------------------------------------------------
|Manual Activity |
------------------------------------------------------------------------
|VALID FOR |
|Software Component SAP_APPL SAP Application |
| Release 46C Until SAPKH46C63 |
| Release 470 Until SAPKH47037 |
| Release 500 Until SAPKH50026 |
| Release 600 Until SAPKH60021 |
| Release 602 Until SAPKH60210 |
| Release 603 Until SAPKH60309 |
| Release 604 Until SAPKH60410 |
| Release 605 Until SAPKH60507 |
| Release 606 SAPKH60601 - SAPKH60602 |
------------------------------------------------------------------------
Proceed as follows:
1. Implement the attached correction instructions or import the relevant Support Package.
2. Use transaction SE91 to create the following message:
Message: GU 635
Message short text: The selection variant does not match transaction &
Long text (available in the attachment as MSG_GU_635_DE for German and MSG_GU_635_EN in English as an ITF file):
&CAUSE&
The program &V2& is used by various applications. Each application uses its own transaction.
You have selected a selection variant that was not created using transaction &V1&.
&SYSTEM_RESPONSE&
The program cannot be executed under the following conditions:
There is no authorization for the selected transaction & V3& for the selection variant.
It is not permitted to switch between the transactions using the selection variant. This setting can be changed using transaction OBA5 if required.
&WHAT_TO_DO&
Execute only the variants that were created using the relevant
transaction.
3. Create a new entry in the view T100S:
Transaction: SM30
Table/View: T100S
Select: "New Entries (F5)".
Application Area: GU
MsgNo: 635
Message types allowed: WE
Standard: E
Save your changes.
------------------------------------------------------------------------
|Manual Activity |
------------------------------------------------------------------------
|VALID FOR |
|Software Component SAP_APPL SAP Application |
| Release 46C Until SAPKH46C63 |
| Release 470 Until SAPKH47037 |
| Release 500 Until SAPKH50026 |
| Release 600 Until SAPKH60021 |
| Release 602 Until SAPKH60210 |
| Release 603 Until SAPKH60309 |
| Release 604 Until SAPKH60410 |
| Release 605 Until SAPKH60507 |
| Release 606 SAPKH60601 - SAPKH60602 |
------------------------------------------------------------------------
Proceed as follows:
1. Implement the attached correction instructions or import the relevant Support Package.
2. Use transaction SE91 to create the following message:
Message: GU 635
Message short text: The selection variant does not match transaction &
Long text (available in the attachment as MSG_GU_635_DE for German and MSG_GU_635_EN in English as an ITF file):
&CAUSE&
The program &V2& is used by various applications. Each application uses its own transaction.
You have selected a selection variant that was not created using transaction &V1&.
&SYSTEM_RESPONSE&
The program cannot be executed under the following conditions:
There is no authorization for the selected transaction & V3& for the selection variant.
It is not permitted to switch between the transactions using the selection variant. This setting can be changed using transaction OBA5 if required.
&WHAT_TO_DO&
Execute only the variants that were created using the relevant
transaction.
3. Create a new entry in the view T100S:
Transaction: SM30
Table/View: T100S
Select: "New Entries (F5)".
Application Area: GU
MsgNo: 635
Message types allowed: WE
Standard: E
Save your changes.
Ссылки
