Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
(AV:N/AC:M/AU:S/C:P/I:P/A:PSAP)
Производитель ПО
Наименование ПО
SAP Notes
(1852738-2)
SAP Support Packages
(SAPK-470E6INSAPHRCZA, SAPK-500B2INSAPHRCZA, SAPK-60096INSAPHRCZA, SAPK-60462INSAPHRCZA, SAPKE46BE1, SAPKE46CK1)
Описание
PA-PA-ZA does not contain authorization checks for checking an authenticated user's authorization to access some of its functions. Thismay result in undesired system behavior.
Как исправить
The function module where the issue exists is currently not supported by SAP. The code which was a security threat has been commented.Apply the relevant HR support package to resolve the issue. Alternatively, apply the attached correction instructions.
Ссылки
