Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
(AV:N/AC:M/AU:S/C:P/I:P/A:PSAP)
Производитель ПО
Наименование ПО
SAP Notes
(1858566-3)
SAP Support Packages
(SAPKH40B89, SAPKH46B62, SAPKH46C66, SAPKH47040, SAPKH50029, SAPKH60024, SAPKH60214, SAPKH60313, SAPKH60414, SAPKH60511, SAPKH60608, SAPKH61603, SAPKH61701)
Описание
Market data upload does not contain authorization checks for checking an authenticated user's authorization to access some of its functions. This may result in undesired system behavior.
Как исправить
Implement the correction instructions.------------------------------------------------------------------------|Manual Activity |------------------------------------------------------------------------|VALID FOR ||Software Component SAP_APPL SAP Application || Release 40B Until SAPKH40B88 || Release 45B All Support Package Levels || Release 46B Until SAPKH46B61 || Release 46C Until SAPKH46C65 || Release 470 Until SAPKH47039 || Release 500 SAPKH50001 - SAPKH50028 |------------------------------------------------------------------------Change with transaction code SE37 for function module TB_DATAFEED_CALL_LOWER_LEVEL the attributes for the processing type to the following value:
Normal Function Module
Normal Function Module
Ссылки
