Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
(AV:N/AC:M/AU:S/C:N/I:P/A:PSAP)
Производитель ПО
Наименование ПО
SAP Notes
(1810809-2)
SAP Support Packages
(SAP_JAVA_TECH_SERVICES_700_SP026_000017, SAP_JAVA_TECH_SERVICES_700_SP027_000009, SAP_JAVA_TECH_SERVICES_700_SP028_000003, SAP_JAVA_TECH_SERVICES_700_SP029_000000, SAP_JAVA_TECH_SERVICES_700_SP999999_999999, SAP_JAVA_TECH_SERVICES_701_SP011_000020, SAP_JAVA_TECH_SERVICES_701_SP012_000009, SAP_JAVA_TECH_SERVICES_701_SP013_000001, SAP_JAVA_TECH_SERVICES_701_SP014_000000, SAP_JAVA_TECH_SERVICES_701_SP999999_999999, SAP_JAVA_TECH_SERVICES_702_SP010_000024, SAP_JAVA_TECH_SERVICES_702_SP011_000016, SAP_JAVA_TECH_SERVICES_702_SP012_000005, SAP_JAVA_TECH_SERVICES_702_SP013_000002, SAP_JAVA_TECH_SERVICES_702_SP014_000000, SAP_JAVA_TECH_SERVICES_702_SP999999_999999)
Описание
File uploading functionality exists in SLD. Due to a program error an attacker can misuse it and upload malicious files in a particular server folder and subsequently use those files to further attack AS Java.
Как исправить
Update your AS Java to an SP or release where the issue is fixed. See the SP Patch Level section for details and available patches.
Ссылки
