Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1591517-1)
SAP Support Packages
(CRM_JAVA_APPLICATIONS_50_SP019_000012, CRM_JAVA_APPLICATIONS_50_SP999999_999999, CRM_JAVA_APPLICATIONS_60_SP009_000007, CRM_JAVA_APPLICATIONS_60_SP999999_999999, CRM_JAVA_APPLICATIONS_70_SP010_000009, CRM_JAVA_APPLICATIONS_70_SP999999_999999, CRM_JAVA_COMPONENTS_50_SP019_000012, CRM_JAVA_COMPONENTS_50_SP999999_999999, CRM_JAVA_COMPONENTS_60_SP009_000007, CRM_JAVA_COMPONENTS_60_SP999999_999999, CRM_JAVA_COMPONENTS_70_SP010_000009, CRM_JAVA_COMPONENTS_70_SP999999_999999, CRM_JAVA_WEB_COMPONENTS_50_SP019_000012, CRM_JAVA_WEB_COMPONENTS_50_SP999999_999999, CRM_JAVA_WEB_COMPONENTS_60_SP009_000007, CRM_JAVA_WEB_COMPONENTS_60_SP999999_999999, CRM_JAVA_WEB_COMPONENTS_70_SP010_000009, CRM_JAVA_WEB_COMPONENTS_70_SP999999_999999, SAP_SHARED_JAVA_APPLIC_50_SP019_000012, SAP_SHARED_JAVA_APPLIC_50_SP999999_999999, SAP_SHARED_JAVA_APPLIC_60_SP009_000007, SAP_SHARED_JAVA_APPLIC_60_SP999999_999999, SAP_SHARED_JAVA_APPLIC_70_SP010_000009, SAP_SHARED_JAVA_APPLIC_70_SP999999_999999, SAP_SHARED_JAVA_COMPONENTS_50_SP019_000012, SAP_SHARED_JAVA_COMPONENTS_50_SP999999_999999, SAP_SHARED_JAVA_COMPONENTS_60_SP009_000007, SAP_SHARED_JAVA_COMPONENTS_60_SP999999_999999, SAP_SHARED_JAVA_COMPONENTS_70_SP010_000009, SAP_SHARED_JAVA_COMPONENTS_70_SP999999_999999, SAP_SHARED_WEB_COMPONENTS_50_SP019_000012, SAP_SHARED_WEB_COMPONENTS_50_SP999999_999999, SAP_SHARED_WEB_COMPONENTS_60_SP009_000007, SAP_SHARED_WEB_COMPONENTS_60_SP999999_999999, SAP_SHARED_WEB_COMPONENTS_70_SP010_000009, SAP_SHARED_WEB_COMPONENTS_70_SP999999_999999)
Описание
One or more components fail to correctly validate the path that is used to reference a file that is read from the remote server. As a result, a malicious user can potentially direct the program to an arbitrary other file in the system, disclosing its contents.
Как исправить
To correct the issue apply the java patch valid for your CRM release from the SAP Service Marketplace.
Ссылки
