• Все разделы
  • Статьи
  • Медиа
  • Новости
  • Нормативные материалы
  • Конференции
  • Глоссарий

Note 1846515 - Missing authorization check in BC-SRV-REP

Главная Специалистам База уязвимостей Note 1846515 - Missing authorization check in BC-SRV-REP

Карточка уязвимости

Характеристики уязвимости

Уровень опасности
Оценка CVSS
(AV:N/AC:H/AU:S/C:P/I:P/A:PSAP)
Производитель ПО
SAP
Наименование ПО
SAP Notes (1846515-4) SAP Support Packages (SAPKB46B62, SAPKB46C66, SAPKB46D45, SAPKB62074, SAPKB64032, SAPKB70029, SAPKB70114, SAPKB70214, SAPKB71017, SAPKB71112, SAPKB72008, SAPKB73010, SAPKB73108, SAPKB74003)
Описание
BC-SRV-REP contain authorization checks for checking an authenticated  user's authorization to access some of its functions. This may result in undesired system behavior.
Как исправить
Support package or preliminary correction------------------------------------------------------------------------|Manual Activity                                                       |------------------------------------------------------------------------|VALID FOR                                                             ||Software Component   SAP_BASIS                      SAP Basis compo...|| Release 610          Until SAPKB61047                                || Release 46C          Until SAPKB46C65                                || Release 46B          Until SAPKB46B61                                || Release 46A          Until SAPKB46A34                                || Release 46D          Until SAPKB46D44                                || Release 620          Until SAPKB62054                                || Release 640          Until SAPKB64012                                |------------------------------------------------------------------------Open the Function Builder (Transaction SE37)Enter the function modlue MAINTAIN_REPORTING_TREE, choose "Change"If a dialogbox "Different original and logon languages" comes up, choose "Maint. in orig. lang."In the following screen choose the tab "Exceptions"Add: exception: NO_AUTHORITY_TCODE,     short text: Keine TransaktionsberechtigungSave (Ctrl+S) and Activate (Ctrl+F3)
Ссылки