Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1658530-1)
SAP Support Packages
(J2EE_ENGINE_SERVERCORE_710_SP011_000011, J2EE_ENGINE_SERVERCORE_710_SP012_000012, J2EE_ENGINE_SERVERCORE_710_SP013_000003, J2EE_ENGINE_SERVERCORE_710_SP015_000000, J2EE_ENGINE_SERVERCORE_710_SP999999_999999, J2EE_ENGINE_SERVERCORE_711_SP006_000029, J2EE_ENGINE_SERVERCORE_711_SP007_000011, J2EE_ENGINE_SERVERCORE_711_SP008_000006, J2EE_ENGINE_SERVERCORE_711_SP009_000000, J2EE_ENGINE_SERVERCORE_711_SP010_000000, J2EE_ENGINE_SERVERCORE_711_SP999999_999999, J2EE_ENGINE_SERVERCORE_720_SP003_000047, J2EE_ENGINE_SERVERCORE_720_SP004_000041, J2EE_ENGINE_SERVERCORE_720_SP005_000018, J2EE_ENGINE_SERVERCORE_720_SP006_000006, J2EE_ENGINE_SERVERCORE_720_SP007_000000, J2EE_ENGINE_SERVERCORE_720_SP999999_999999, J2EE_ENGINE_SERVERCORE_730_SP001_000012, J2EE_ENGINE_SERVERCORE_730_SP002_000017, J2EE_ENGINE_SERVERCORE_730_SP003_000013, J2EE_ENGINE_SERVERCORE_730_SP004_000005, J2EE_ENGINE_SERVERCORE_730_SP005_000004, J2EE_ENGINE_SERVERCORE_730_SP007_000000, J2EE_ENGINE_SERVERCORE_730_SP999999_999999, J2EE_ENGINE_SERVERCORE_731_SP001_000004, J2EE_ENGINE_SERVERCORE_731_SP002_000000, J2EE_ENGINE_SERVERCORE_731_SP003_000000, J2EE_ENGINE_SERVERCORE_731_SP999999_999999, SAP_J2EE_ENGINE_640_SP026_000029, SAP_J2EE_ENGINE_640_SP027_000024, SAP_J2EE_ENGINE_640_SP028_000011, SAP_J2EE_ENGINE_640_SP029_000002, SAP_J2EE_ENGINE_640_SP999999_999999, SAP_J2EE_ENGINE_CORE_640_SP030_000000, SAP_J2EE_ENGINE_CORE_640_SP999999_999999, SAP_J2EE_ENGINE_CORE_700_SP023_000016, SAP_J2EE_ENGINE_CORE_700_SP024_000010, SAP_J2EE_ENGINE_CORE_700_SP025_000006, SAP_J2EE_ENGINE_CORE_700_SP026_000003, SAP_J2EE_ENGINE_CORE_700_SP027_000000, SAP_J2EE_ENGINE_CORE_700_SP999999_999999, SAP_J2EE_ENGINE_CORE_701_SP008_000014, SAP_J2EE_ENGINE_CORE_701_SP009_000012, SAP_J2EE_ENGINE_CORE_701_SP010_000008, SAP_J2EE_ENGINE_CORE_701_SP011_000001, SAP_J2EE_ENGINE_CORE_701_SP012_000000, SAP_J2EE_ENGINE_CORE_701_SP999999_999999, SAP_J2EE_ENGINE_CORE_702_SP005_000013, SAP_J2EE_ENGINE_CORE_702_SP006_000017, SAP_J2EE_ENGINE_CORE_702_SP007_000013, SAP_J2EE_ENGINE_CORE_702_SP008_000010, SAP_J2EE_ENGINE_CORE_702_SP009_000008, SAP_J2EE_ENGINE_CORE_702_SP010_000002, SAP_J2EE_ENGINE_CORE_702_SP011_000000, SAP_J2EE_ENGINE_CORE_702_SP999999_999999)
Описание
The remote security component does not contain sufficient authorization checks for checking an authenticated user's authorization to access some of its functions. This may result in undesired system behavior
Как исправить
The fix is available in the versions of the Web AS Java detailed in the "SP Patch Level" section of the note.
Ссылки
