Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1711728-3)
SAP Support Packages
(ESR_710_SP009_000021, ESR_710_SP010_000013, ESR_710_SP011_000010, ESR_710_SP012_000004, ESR_710_SP013_000000, ESR_710_SP999999_999999, ESR_711_SP005_000023, ESR_711_SP006_000016, ESR_711_SP007_000005, ESR_711_SP008_000000, ESR_711_SP009_000000, ESR_711_SP010_000000, ESR_711_SP999999_999999, ESR_730_SP000_000003, ESR_730_SP001_000009, ESR_730_SP002_000013, ESR_730_SP003_000006, ESR_730_SP004_000003, ESR_730_SP005_000002, ESR_730_SP999999_999999, ESR_731_SP002_000000, ESR_731_SP999999_999999, PI_GUI_LIBRARY_720_SP003_000002, PI_GUI_LIBRARY_720_SP004_000003, PI_GUI_LIBRARY_720_SP005_000002, PI_GUI_LIBRARY_720_SP006_000001, PI_GUI_LIBRARY_720_SP999999_999999, PI_GUI_LIBRARY_730_SP000_000001, PI_GUI_LIBRARY_730_SP001_000002, PI_GUI_LIBRARY_730_SP002_000006, PI_GUI_LIBRARY_730_SP003_000005, PI_GUI_LIBRARY_730_SP004_000002, PI_GUI_LIBRARY_730_SP005_000002, PI_GUI_LIBRARY_730_SP007_000000, PI_GUI_LIBRARY_730_SP999999_999999, PI_GUI_LIBRARY_731_SP002_000000, PI_GUI_LIBRARY_731_SP999999_999999, XI_TOOLS_700_SP022_000018, XI_TOOLS_700_SP023_000010, XI_TOOLS_700_SP024_000011, XI_TOOLS_700_SP025_000005, XI_TOOLS_700_SP999999_999999, XI_TOOLS_701_SP008_000007, XI_TOOLS_701_SP009_000006, XI_TOOLS_701_SP010_000003, XI_TOOLS_701_SP011_000000, XI_TOOLS_701_SP999999_999999, XI_TOOLS_702_SP006_000007, XI_TOOLS_702_SP007_000007, XI_TOOLS_702_SP008_000004, XI_TOOLS_702_SP009_000000, XI_TOOLS_702_SP999999_999999)
Описание
Shipping non documented features to customers is incorrect.This is regarded as a security violation and hence it is recommended to disable these features.
Как исправить
The Developer mode is disabled. Hence there is no way to switch on the Developer mode in ESR or in Directory swing clients.Hence the following developer(internal) features cannot be invoked:
1. Debug mode.
2. XIItem context menu.
3. F2 Feature.
4. Error log details.
5. Revert all change list command is disabled in the worksapce view.
6. Import/Export option for Mappings.
7. + + Right click and Double Left click.
These options are now disabled. As a result, no menu will be available for the following:Last Used, Tools\Export Tools\Import, Tools\Export Tools\Export,Tools\Color schema\Schema XI20 SP3,Tools\Color schema\Schema XI30 "accessible", Tools\Local Compilation,Tools\JarClassTest, Tools\Autosize Bricks, Encoding.
1. Debug mode.
2. XIItem context menu.
3. F2 Feature.
4. Error log details.
5. Revert all change list command is disabled in the worksapce view.
6. Import/Export option for Mappings.
7.
These options are now disabled. As a result, no menu will be available for the following:Last Used, Tools\Export Tools\Import, Tools\Export Tools\Export,Tools\Color schema\Schema XI20 SP3,Tools\Color schema\Schema XI30 "accessible", Tools\Local Compilation,Tools\JarClassTest, Tools\Autosize Bricks, Encoding.
Ссылки