Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1715734-2)
SAP Support Packages
(J2EE_ENGINE_SERVERCORE_710_SP012_000025, J2EE_ENGINE_SERVERCORE_710_SP013_000016, J2EE_ENGINE_SERVERCORE_710_SP014_000019, J2EE_ENGINE_SERVERCORE_710_SP015_000002, J2EE_ENGINE_SERVERCORE_710_SP016_000000, J2EE_ENGINE_SERVERCORE_710_SP999999_999999, J2EE_ENGINE_SERVERCORE_711_SP007_000024, J2EE_ENGINE_SERVERCORE_711_SP008_000020, J2EE_ENGINE_SERVERCORE_711_SP009_000020, J2EE_ENGINE_SERVERCORE_711_SP010_000003, J2EE_ENGINE_SERVERCORE_711_SP011_000000, J2EE_ENGINE_SERVERCORE_711_SP999999_999999, J2EE_ENGINE_SERVERCORE_720_SP005_000038, J2EE_ENGINE_SERVERCORE_720_SP006_000027, J2EE_ENGINE_SERVERCORE_720_SP007_000022, J2EE_ENGINE_SERVERCORE_720_SP008_000001, J2EE_ENGINE_SERVERCORE_720_SP009_000000, J2EE_ENGINE_SERVERCORE_720_SP999999_999999, J2EE_ENGINE_SERVERCORE_730_SP002_000029, J2EE_ENGINE_SERVERCORE_730_SP003_000029, J2EE_ENGINE_SERVERCORE_730_SP004_000025, J2EE_ENGINE_SERVERCORE_730_SP005_000037, J2EE_ENGINE_SERVERCORE_730_SP007_000022, J2EE_ENGINE_SERVERCORE_730_SP008_000000, J2EE_ENGINE_SERVERCORE_730_SP009_000000, J2EE_ENGINE_SERVERCORE_730_SP999999_999999, J2EE_ENGINE_SERVERCORE_731_SP002_000023, J2EE_ENGINE_SERVERCORE_731_SP003_000017, J2EE_ENGINE_SERVERCORE_731_SP004_000010, J2EE_ENGINE_SERVERCORE_731_SP005_000000, J2EE_ENGINE_SERVERCORE_731_SP006_000000, J2EE_ENGINE_SERVERCORE_731_SP999999_999999, SAP_J2EE_ENGINE_640_SP027_000030, SAP_J2EE_ENGINE_640_SP028_000021, SAP_J2EE_ENGINE_640_SP029_000014, SAP_J2EE_ENGINE_640_SP030_000007, SAP_J2EE_ENGINE_640_SP031_000000, SAP_J2EE_ENGINE_640_SP999999_999999, SAP_J2EE_ENGINE_CORE_640_SP031_000000, SAP_J2EE_ENGINE_CORE_640_SP999999_999999, SAP_J2EE_ENGINE_CORE_700_SP025_000021, SAP_J2EE_ENGINE_CORE_700_SP026_000021, SAP_J2EE_ENGINE_CORE_700_SP027_000009, SAP_J2EE_ENGINE_CORE_700_SP028_000000, SAP_J2EE_ENGINE_CORE_700_SP029_000000, SAP_J2EE_ENGINE_CORE_700_SP999999_999999, SAP_J2EE_ENGINE_CORE_701_SP010_000025, SAP_J2EE_ENGINE_CORE_701_SP011_000022, SAP_J2EE_ENGINE_CORE_701_SP012_000012, SAP_J2EE_ENGINE_CORE_701_SP013_000000, SAP_J2EE_ENGINE_CORE_701_SP014_000000, SAP_J2EE_ENGINE_CORE_701_SP999999_999999, SAP_J2EE_ENGINE_CORE_702_SP008_000025, SAP_J2EE_ENGINE_CORE_702_SP009_000026, SAP_J2EE_ENGINE_CORE_702_SP010_000023, SAP_J2EE_ENGINE_CORE_702_SP011_000023, SAP_J2EE_ENGINE_CORE_702_SP012_000008, SAP_J2EE_ENGINE_CORE_702_SP013_000000, SAP_J2EE_ENGINE_CORE_702_SP014_000000, SAP_J2EE_ENGINE_CORE_702_SP999999_999999)
Описание
dbpool does not contain authorization checks for checking an authenticated user's authorization to access some of its functions. This may result in undesired system behavior.
Как исправить
Update your AS Java to an SP or release where the issue is fixed. See the SP Patch Level section for details and available patches.
Ссылки
