• Все разделы
  • Статьи
  • Медиа
  • Новости
  • Нормативные материалы
  • Конференции
  • Глоссарий

Note 1766044 - Missing authorization checks for enhanced contract data

Главная Специалистам База уязвимостей Note 1766044 - Missing authorization checks for enhanced contract data

Карточка уязвимости

Характеристики уязвимости

Уровень опасности
Оценка CVSS
(AV:N/AC:M/AU:S/C:P/I:P/A:PThis)
Производитель ПО
SAP
Наименование ПО
SAP Notes (1766044-6) SAP Support Packages (SAPKH60313, SAPKH60414, SAPKH60511, SAPKH60608, SAPKH61603, SAPKH61701)
Описание
The enhanced contract data does not contain authorization checks for  checking an authenticated user's authorization to access some of its functions. This may result in undesired system behavior.
Как исправить
Implement the attached program correction or import the corresponding Support Package.------------------------------------------------------------------------|Manual Activity                                                       |------------------------------------------------------------------------|VALID FOR                                                             ||Software Component   SAP_APPL                      SAP Application   || Release 603          Until SAPKH60312                                || Release 604          Until SAPKH60413                                || Release 605          Until SAPKH60510                                || Release 606          Until SAPKH60607                                || Release 616          Until SAPKH61602                                || Release 617          w/o Support Packages                            |------------------------------------------------------------------------
Ссылки