Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
(AV:A/AC:M/AU:S/C:P/I:N/A:NThis)
Производитель ПО
Наименование ПО
SAP Notes
(1446476-3)
SAP Support Packages
(SAPKB64032, SAPKB70023, SAPKB70108, SAPKB70205, SAPKB71011, SAPKB71106, SAPKB72003, SAPKB72004, SAPKB73001)
Описание
The SAP ALV fails to correctly validate UNC paths that are used to reference files that are read from remote servers.An attacker may use this vulnerability by redirecting the user to a compromised SMB share.
Как исправить
Implement the source code corrections in accordance with the correction instructions.
Ссылки
