Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1653165-1)
Описание
Intercompany executes certain functions by referencing specific URLs. When an attacker tricks an authenticated user#s browser into making a request containing a certain URL and specific parameters, the function is executed with the rights of the authenticated user. The attacker may use a cross-site scripting attack to do this, or they may present a link to the victim.
Как исправить
XSRF protection has been implemented in the following service packages:
IC 10 SP06
IC 7.5 SP17
IC 10 SP06
IC 7.5 SP17
Ссылки
