Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1603379-3)
SAP Support Packages
(530_731, SAPK-40012INVIRSANH, SAPK-40112INVIRSANH, SAPK-40212INVIRSANH, SAPK-40313INVIRSANH, SAPK-47013INVIRSA, SAPK-52013INVIRSAHR, SAPK-52016INVIRSANH, SAPK-52114INVIRSAHR, SAPK-52117INVIRSANH, SAPK-52214INVIRSAHR, SAPK-52217INVIRSANH, SAPK-52314INVIRSAHR, SAPK-52317INVIRSANH, SAPK-53016INVIRSAHR, SAPK-53018INVIRSANH, SAPK-53116INVIRSAHR, SAPK-53118INVIRSANH, SAPK-53216INVIRSAHR, SAPK-53218INVIRSANH, SAPK-53316INVIRSAHR, SAPK-53318INVIRSANH, SAPK-53412INVIRSANH, SAPK-V4719INVIRSA, SAPK-V4C20INVIRSA, SAPK-V4E20INVIRSA)
Описание
VIRSANH, VIRSAHR and VIRSA fail to correctly validate the path that is used to reference a file that is read from the remote server. Additionally, which VIRSANH, VIRSAHR and VIRSA correctly validate the path to which a user-submitted file is written. As a result, a malicious user can potentially disclose or overwrite data in the remote system.
Как исправить
Please apply the sap note 1603379 corrections carefully.
Ссылки
