• Все разделы
  • Статьи
  • Медиа
  • Новости
  • Нормативные материалы
  • Конференции
  • Глоссарий

Note 1840304 - Missing authorization check in Expenditure Certification

Главная Специалистам База уязвимостей Note 1840304 - Missing authorization check in Expenditure Certification

Карточка уязвимости

Характеристики уязвимости

Уровень опасности
Оценка CVSS
(AV:N/AC:M/AU:S/C:P/I:P/A:PSAP)
Производитель ПО
SAP
Наименование ПО
SAP Notes (1840304-3) SAP Support Packages (SAPK-60313INEAPS, SAPK-60414INEAPS, SAPK-60511INEAPS, SAPK-60608INEAPS, SAPK-61603INEAPS, SAPK-61701INEAPS)
Описание
Reason: Expenditure Certification does not contain authorization checks  for checking an authenticated user's authorization to access some of its functions. This may result in undesired system behavior.Prerequisites: You have implemented the Note 1519162 or the Support Package containing the corrections of Note 1519162.
Как исправить
Implement the attached correction instructions only, if you have Note 1519162 or the corresponding Support Package in your system.
Ссылки