Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
(AV:A/AC:M/AU:S/C:P/I:N/A:NThis)
Производитель ПО
Наименование ПО
SAP Notes
(1821019-2)
SAP Support Packages
(SAPKB46C66, SAPKB46D45, SAPKB62074, SAPKB64032, SAPKB70029, SAPKB70114, SAPKB70214, SAPKB71017, SAPKB71112, SAPKB72008, SAPKB73010, SAPKB73108, SAPKB74003)
Описание
SAP systems do not contain authorization checks for checking an authenticated user's authorization to access some of their functions. Without these checks, an authenticated user can call these functions without this being the desired system behavior.
Как исправить
The problem is solved as of the listed Support Packages.Alternatively, you can implement the relevant correction instructions.
Ссылки
