Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
(AV:N/AC:M/AU:S/C:P/I:P/A:PSAP)
Производитель ПО
Наименование ПО
SAP Notes
(1860278-2)
SAP Support Packages
(SAPK-61701INSAPFIN, SAPKH60024, SAPKH60214, SAPKH60313, SAPKH60414, SAPKH60511, SAPKH60608, SAPKH61603)
Описание
The components do not contain required checks against a positive set of allowed functions (i.e. whitelist) during execution of these functions. This is required to verify authenticated users are allowed to access these functions. The missing check may result in undesired system behavior.
Как исправить
Implement support package or correction instructions.
Ссылки
