Note 1791089 - Missing authorization check in DMIS

Уровень опасности

Низкая (0)

Оценка CVSS

(AV:N/AC:M/AU:S/C:P/I:P/A:PSAP)

Производитель ПО

SAP

Наименование ПО

SAP Notes (1791089-6) SAP Support Packages (SAPK-11104INDMIS, SAPK-11204INDMIS, SAPK-11304INDMIS, SAPK-11404INDMIS, SAPK-11504INDMIS, SAPK-11604INDMIS, SAPK-91409INDMIS, SAPK-91509INDMIS, SAPK-91609INDMIS, SAPK-91709INDMIS, SAPK-91809INDMIS)

Описание

DMIS does not contain authorization checks for checking an authenticated user's authorization to access some of its functions. This may result in undesired system behavior.

Как исправить

Implement the automatic correction instruction in all affected systems (i.e. if software component DMIS is present).

Ссылки

Note 1678055 - Unauthorized modification of displayed content in ICM e-mail Note 1791238 - Potential denial of service in SAP Kernel (Diag parser)

Назад к списку уязвимостей

Note 1791089 - Missing authorization check in DMIS

Карточка уязвимости

Характеристики уязвимости