Note 1847645 - Missing authorization check in BC-BMT-WFM

Уровень опасности

Низкая (0.0)

Оценка CVSS

(AV:N/AC:H/AU:S/C:N/I:P/A:PSAP)

Производитель ПО

SAP

Наименование ПО

SAP Notes (1847645-4) SAP Support Packages (SAPKB64032, SAPKB70029, SAPKB70114, SAPKB70214, SAPKB71017, SAPKB71112, SAPKB73010, SAPKB73108, SAPKB74003, SAPKB74004)

Описание

BC-BMT-WFM does not contain authorization checks for checking anauthenticated user's authorization to access some of its functions. This may result in undesired system behavior.

Как исправить

Please implement the correction instruction.------------------------------------------------------------------------|Manual Activity |------------------------------------------------------------------------|VALID FOR ||Software Component SAP_BASIS SAP Basis compo...|| Release 640 Until SAPKB64031 |------------------------------------------------------------------------Change Processing Type of function module SWE_EVENT_CREATE_INTERNAL:
call Function Builder (transaction SE37) or Workbench (transaction SE80)
choose Function Module SWE_EVENT_CREATE_INTERNAL (function group SWEA)
open screen for Attributes of Function Module SWE_EVENT_CREATE_INTERNAL
change Processing Type from 'Remote-Enabled Module' to 'Normal Function Module'
Activate

Ссылки

Назад к списку уязвимостей

Note 1847645 - Missing authorization check in BC-BMT-WFM

Карточка уязвимости

Характеристики уязвимости