Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1596039-4)
SAP Support Packages
(616, SAPK-60211INEARETAIL, SAPK-60310INEARETAIL, SAPK-60411INEARETAIL, SAPK-60507INEARETAIL, SAPK-60602INEARETAIL, SAPKGPRB22, SAPKGPRC26, SAPKGPRD21)
Описание
The BSP application mentioned above can be abused by an attacker, allowing them to modify application content, persist the modified content without authorization, and to potentially obtain authentication information from other legitimate users.
Как исправить
Import the relevant Support Package to deactivate the affected BSP applications. Since this BSP application is obsolete also from a functional point of view, you should not continue to use it.A manual implementation using this note is not possible. You can only manually turn the layout source code and the event handler source code into comments or delete the entire BSP application. In addition, the service nodes must be deleted using transaction SICF.A new Web Dynpro application "Complaints Workbench for Customers" that covers this function is available with ECC 6.00 Enhancement Package 4. You can start this using transaction WCUSPOWL.
Ссылки
