Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
(AV:N/AC:M/AU:S/C:C/I:C/A:CSAP)
Производитель ПО
Наименование ПО
SAP Notes
(1893440-3)
Описание
The cause of the problem is a SQL injection vulnerability. The attacker can create special strings which manipulate the SQL statement being executed to elevate attacker's privileges in the system.
Как исправить
This issue has been fixed in the following SAP Sybase ASE versions:SAP Sybase ASE 15.7 SP100SAP Sybase ASE 15.7 ESD#4.2SAP Sybase ASE 15.5 ESD#5.3SAP Sybase ASE 15.0.3 ESD#4.3Install the fixed SAP Sybase ASE versions most appropriate for your production environments.
Ссылки
