• Все разделы
  • Статьи
  • Медиа
  • Новости
  • Нормативные материалы
  • Конференции
  • Глоссарий

Note 1782955 - Missing authorization check in the telnet command password

Главная Специалистам База уязвимостей Note 1782955 - Missing authorization check in the telnet command password

Карточка уязвимости

Характеристики уязвимости

Уровень опасности
Оценка CVSS
Производитель ПО
SAP
Наименование ПО
SAP Notes (1782955-2) SAP Support Packages (J2EE_ENGINE_SERVERCORE_710_SP013_000020, J2EE_ENGINE_SERVERCORE_710_SP014_000022, J2EE_ENGINE_SERVERCORE_710_SP015_000005, J2EE_ENGINE_SERVERCORE_710_SP016_000001, J2EE_ENGINE_SERVERCORE_710_SP017_000000, J2EE_ENGINE_SERVERCORE_710_SP999999_999999, J2EE_ENGINE_SERVERCORE_711_SP008_000026, J2EE_ENGINE_SERVERCORE_711_SP009_000026, J2EE_ENGINE_SERVERCORE_711_SP010_000010, J2EE_ENGINE_SERVERCORE_711_SP011_000003, J2EE_ENGINE_SERVERCORE_711_SP012_000000, J2EE_ENGINE_SERVERCORE_711_SP999999_999999, J2EE_ENGINE_SERVERCORE_720_SP005_000048, J2EE_ENGINE_SERVERCORE_720_SP006_000033, J2EE_ENGINE_SERVERCORE_720_SP007_000028, J2EE_ENGINE_SERVERCORE_720_SP008_000008, J2EE_ENGINE_SERVERCORE_720_SP009_000000, J2EE_ENGINE_SERVERCORE_720_SP999999_999999, J2EE_ENGINE_SERVERCORE_730_SP004_000032, J2EE_ENGINE_SERVERCORE_730_SP005_000048, J2EE_ENGINE_SERVERCORE_730_SP007_000036, J2EE_ENGINE_SERVERCORE_730_SP008_000003, J2EE_ENGINE_SERVERCORE_730_SP009_000000, J2EE_ENGINE_SERVERCORE_730_SP999999_999999, J2EE_ENGINE_SERVERCORE_731_SP001_000025, J2EE_ENGINE_SERVERCORE_731_SP002_000028, J2EE_ENGINE_SERVERCORE_731_SP003_000025, J2EE_ENGINE_SERVERCORE_731_SP004_000017, J2EE_ENGINE_SERVERCORE_731_SP005_000001, J2EE_ENGINE_SERVERCORE_731_SP006_000001, J2EE_ENGINE_SERVERCORE_731_SP007_000000, J2EE_ENGINE_SERVERCORE_731_SP999999_999999, SAP_J2EE_ENGINE_640_SP029_000013, SAP_J2EE_ENGINE_640_SP030_000005, SAP_J2EE_ENGINE_640_SP031_000001, SAP_J2EE_ENGINE_640_SP999999_999999, SAP_J2EE_ENGINE_CORE_700_SP026_000020, SAP_J2EE_ENGINE_CORE_700_SP027_000008, SAP_J2EE_ENGINE_CORE_700_SP028_000003, SAP_J2EE_ENGINE_CORE_700_SP029_000000, SAP_J2EE_ENGINE_CORE_700_SP999999_999999, SAP_J2EE_ENGINE_CORE_701_SP011_000021, SAP_J2EE_ENGINE_CORE_701_SP012_000011, SAP_J2EE_ENGINE_CORE_701_SP013_000001, SAP_J2EE_ENGINE_CORE_701_SP014_000000, SAP_J2EE_ENGINE_CORE_701_SP999999_999999, SAP_J2EE_ENGINE_CORE_702_SP009_000025, SAP_J2EE_ENGINE_CORE_702_SP010_000022, SAP_J2EE_ENGINE_CORE_702_SP011_000022, SAP_J2EE_ENGINE_CORE_702_SP012_000007, SAP_J2EE_ENGINE_CORE_702_SP013_000002, SAP_J2EE_ENGINE_CORE_702_SP014_000000, SAP_J2EE_ENGINE_CORE_702_SP999999_999999)
Описание
The password telnet command does not contain authorization checks for an  authenticated user. This may result in undesired system behavior.
Как исправить
Update your Java AS to an SP or release where the issue is fixed. See the SP Patch Level section for details and available patches.
Ссылки