Note 1674132 - Code injection vulnerability in BC-SRV-COM-FTP

Уровень опасности

Низкая (0)

Оценка CVSS

(AV:N/AC:M/AU:S/C:P/I:P/A:PSAP)

Производитель ПО

SAP

Наименование ПО

SAP Notes (1674132-11) SAP Support Packages (SAPKB46B62, SAPKB46C64, SAPKB46C66, SAPKB62072, SAPKB62074, SAPKB64030, SAPKB64032, SAPKB70027, SAPKB70029, SAPKB70112, SAPKB70114, SAPKB70212, SAPKB70213, SAPKB70214, SAPKB71015, SAPKB71017, SAPKB71110, SAPKB71112, SAPKB72008, SAPKB73007, SAPKB73008, SAPKB73009, SAPKB73103, SAPKB73107, SAPKH45B67)

Описание

The program code contains a possibility to define and execute user-defined code that changes the behavior of the system.Depending on the code, the user can:
inject and run their own code,
obtain additional information that should not be displayed,
perform a denial of service attack.

Как исправить

Please implement the correction instructions attached to this snote

Ссылки

Note 1673853 - Unauthorized modification in BSP application in IS-HER-CM Note 1674366 - Unauthorized mod. of displayed content in BSP CRM_PS_SOA

Назад к списку уязвимостей

Note 1674132 - Code injection vulnerability in BC-SRV-COM-FTP

Карточка уязвимости

Характеристики уязвимости