• Все разделы
  • Статьи
  • Медиа
  • Новости
  • Нормативные материалы
  • Конференции
  • Глоссарий

Note 1772529 - Missing authoriztion check in BC-ILM-LCM

Главная Специалистам База уязвимостей Note 1772529 - Missing authoriztion check in BC-ILM-LCM

Карточка уязвимости

Характеристики уязвимости

Уровень опасности
Оценка CVSS
(AV:N/AC:M/AU:S/C:P/I:P/A:PSAP)
Производитель ПО
SAP
Наименование ПО
SAP Notes (1772529-8) SAP Support Packages (SAPKB70113, SAPKB70114, SAPKB70213, SAPKB70214, SAPKB71016, SAPKB71017, SAPKB71111, SAPKB71112, SAPKB72008, SAPKB73009, SAPKB73010, SAPKB73106, SAPKB73109, SAPKB74003)
Описание
BC-ILM-LCM does not contain authorization checks for checking an  authenticated user#s authorization to access some of its functions. This may result in undesired system behavior.
Как исправить
Implement the correction instructions or import the Support Package referenced in this SAP Note.------------------------------------------------------------------------|Manual Activity                                                       |------------------------------------------------------------------------|VALID FOR                                                             ||Software Component   SAP_BASIS                      SAP Basis compo...|| Release 701          Until SAPKB70113                                || Release 702          SAPKB70201 - SAPKB70213                         |------------------------------------------------------------------------The changes from this SAP Note ensure that e-discovery reports can be executed only if they are entered in the table LHM_EDIS_REPORTS. If this is not the case, e-discovery terminates and the system issues an error message. To register e-discovery reports in the table LHM_EDIS_REPORTS, proceed as follows:
Call transaction SM30.
Enter the table LHM_EDIS_REPORTS and choose "Maintain".
Enter the selection programs developed for e-discovery in the list.
------------------------------------------------------------------------|Manual Activity                                                       |------------------------------------------------------------------------|VALID FOR                                                             ||Software Component   SAP_BASIS                      SAP Basis compo...|| Release 731          SAPKB73101 - SAPKB73108                         || Release 740          Until SAPKB74002                                |------------------------------------------------------------------------The changes from this SAP Note ensure that e-discovery reports can be executed only if they are entered in the table LHM_EDIS_REPORTS. If this is not the case, e-discovery terminates and the system issues an error message. To register e-discovery reports in the table LHM_EDIS_REPORTS, proceed as follows:
In the SAP NetWeaver Implementation Guide, choose "Application Server" -> "Basis Services" -> "Information Lifecycle Management" -> "Retention Management" -> "Register E-Discovery Selection Programs".
Enter the selection programs developed for e-discovery in the list.
Ссылки