Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
(AV:N/AC:M/AU:S/C:N/I:P/A:PSAP)
Производитель ПО
Наименование ПО
SAP Notes
(1853852-3)
SAP Support Packages
(SAPK-60314INEAFINSRV, SAPK-60415INEAFINSRV, SAPK-60512INEAFINSRV, SAPK-60608INEAFINSRV, SAPK-61603INEAFINSRV, SAPK-61701INEAFINSRV, SAPKGPFA36, SAPKGPFB25, SAPKGPFC29, SAPKGPFD25, SAPKIPBJ43)
Описание
IS-B-BCA does not contain authorization checks for checking an authenticated user's authorization to access some of its functions. This may result in undesired system behavior.
Как исправить
Apply the corrections included in this note.------------------------------------------------------------------------|Manual Post-Implement. |------------------------------------------------------------------------|VALID FOR ||Software Component EA-FINSERV SAP R/3 Enterpr...|| Release 110 Until SAPKGPFA35 || Release 200 Until SAPKGPFB24 || Release 500 SAPKGPFC01 - SAPKGPFC28 |------------------------------------------------------------------------Attention: You don't have to carry out this manual activity if your netweaver support package level is higher than SAPKB62054 or SAPKB64012).Call transaction SE37, enter function module OPEN_FI_PERFORM_00015000_E, press button 'Change', select tabstrip 'Attributes', select radio button 'Normal Function Module', save and activate.------------------------------------------------------------------------|Manual Activity |------------------------------------------------------------------------|VALID FOR ||Software Component BANK/CFM SAP Banking & S...|| Release 463_20 Until SAPKIPBJ42 |------------------------------------------------------------------------Call transaction SE37, enter function module OPEN_FI_PERFORM_00015000_E, press button 'Change', select tabstrip 'Attributes', select radio button 'Normal Function Module', save and activate.
Ссылки
