Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
(AV:N/AC:H/AU:S/C:N/I:P/A:NSAP)
Производитель ПО
Наименование ПО
SAP Notes
(1864081-4)
SAP Support Packages
(SAPK-60314INEAFINSRV, SAPK-60415INEAFINSRV, SAPK-60512INEAFINSRV, SAPK-60608INEAFINSRV, SAPK-61603INEAFINSRV, SAPK-61702INEAFINSRV, SAPKGPFD25)
Описание
Fin-FSCM-TRM-TM does not contain authorization checks for checking an authenticated user's authorization to access some of its functions. This may result in undesired system behavior.
Как исправить
In accordance with correction instructions------------------------------------------------------------------------|Manual Activity |------------------------------------------------------------------------|VALID FOR ||Software Component EA-FINSERV SAP R/3 Enterpr...|| Release 600 SAPKGPFD01 - SAPKGPFD24 || Release 603 Until SAPK-60313INEAFINSRV || Release 604 SAPK-60401INEAFINSRV - SAPK-60414INEAFINSRV || Release 605 SAPK-60503INEAFINSRV - SAPK-60511INEAFINSRV || Release 606 SAPK-60601INEAFINSRV - SAPK-60607INEAFINSRV || Release 616 Until SAPK-61602INEAFINSRV || Release 617 Until SAPK-61701INEAFINSRV |------------------------------------------------------------------------
1. Please sse transaction SE91 to create message number 12 for the message class FTR1.
Enter the following short text: No authorization: CCode &1, PType &2, activity &3
Set the "Self-explanatory" indicator.
Save your changes.
2. Use transaction SE91 to create message number 13 for the message class FTR1.
Enter the following short text: Deal creator is not allowed to release the deal
Set the "Self-explanatory" indicator.
Save your changes.
3. Open the Workflow Builder (Transaction swdd).
Open Workflow Template WS20000138.
For each Approval activity please repeat the following:
Go to tab 'Program Exits'.
Enter as Program Exit class 'cl_swf_tr_workitem_exit'.
Save your changes.
Please note that there are six approval activities - 000311, 000312, 00313, 000362, 000364, 000398
Activate Workflow WS20000138.
1. Please sse transaction SE91 to create message number 12 for the message class FTR1.
Enter the following short text: No authorization: CCode &1, PType &2, activity &3
Set the "Self-explanatory" indicator.
Save your changes.
2. Use transaction SE91 to create message number 13 for the message class FTR1.
Enter the following short text: Deal creator is not allowed to release the deal
Set the "Self-explanatory" indicator.
Save your changes.
3. Open the Workflow Builder (Transaction swdd).
Open Workflow Template WS20000138.
For each Approval activity please repeat the following:
Go to tab 'Program Exits'.
Enter as Program Exit class 'cl_swf_tr_workitem_exit'.
Save your changes.
Please note that there are six approval activities - 000311, 000312, 00313, 000362, 000364, 000398
Activate Workflow WS20000138.
Ссылки
