Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
(AV:N/AC:M/AU:S/C:P/I:N/A:NSAP)
Производитель ПО
Наименование ПО
SAP Notes
(1864915-2)
SAP Support Packages
(CRM_JAVA_APPLICATIONS_50_SP021_000026, CRM_JAVA_APPLICATIONS_50_SP999999_999999, CRM_JAVA_APPLICATIONS_60_SP011_000022, CRM_JAVA_APPLICATIONS_60_SP999999_999999, CRM_JAVA_APPLICATIONS_70_SP012_000027, CRM_JAVA_APPLICATIONS_70_SP999999_999999, CRM_JAVA_APPLICATIONS_701_SP009_000026, CRM_JAVA_APPLICATIONS_701_SP999999_999999, CRM_JAVA_APPLICATIONS_702_SP004_000039, CRM_JAVA_APPLICATIONS_702_SP999999_999999, CRM_JAVA_APPLICATIONS_730_SP012_000028, CRM_JAVA_APPLICATIONS_730_SP999999_999999, CRM_JAVA_APPLICATIONS_731_SP009_000029, CRM_JAVA_APPLICATIONS_731_SP999999_999999, CRM_JAVA_APPLICATIONS_732_SP004_000029, CRM_JAVA_APPLICATIONS_732_SP999999_999999, CRM_JAVA_COMPONENTS_50_SP021_000026, CRM_JAVA_COMPONENTS_50_SP999999_999999, CRM_JAVA_COMPONENTS_60_SP011_000022, CRM_JAVA_COMPONENTS_60_SP999999_999999, CRM_JAVA_COMPONENTS_70_SP012_000027, CRM_JAVA_COMPONENTS_70_SP999999_999999, CRM_JAVA_COMPONENTS_701_SP009_000026, CRM_JAVA_COMPONENTS_701_SP999999_999999, CRM_JAVA_COMPONENTS_702_SP004_000039, CRM_JAVA_COMPONENTS_702_SP999999_999999, CRM_JAVA_COMPONENTS_730_SP012_000028, CRM_JAVA_COMPONENTS_730_SP999999_999999, CRM_JAVA_COMPONENTS_731_SP009_000029, CRM_JAVA_COMPONENTS_731_SP999999_999999, CRM_JAVA_COMPONENTS_732_SP004_000029, CRM_JAVA_COMPONENTS_732_SP999999_999999, CRM_JAVA_WEB_COMPONENTS_50_SP021_000026, CRM_JAVA_WEB_COMPONENTS_50_SP999999_999999, CRM_JAVA_WEB_COMPONENTS_60_SP011_000022, CRM_JAVA_WEB_COMPONENTS_60_SP999999_999999, CRM_JAVA_WEB_COMPONENTS_70_SP012_000027, CRM_JAVA_WEB_COMPONENTS_70_SP999999_999999, CRM_JAVA_WEB_COMPONENTS_701_SP009_000026, CRM_JAVA_WEB_COMPONENTS_701_SP999999_999999, CRM_JAVA_WEB_COMPONENTS_702_SP004_000039, CRM_JAVA_WEB_COMPONENTS_702_SP999999_999999, CRM_JAVA_WEB_COMPONENTS_730_SP012_000028, CRM_JAVA_WEB_COMPONENTS_730_SP999999_999999, CRM_JAVA_WEB_COMPONENTS_731_SP009_000029, CRM_JAVA_WEB_COMPONENTS_731_SP999999_999999, CRM_JAVA_WEB_COMPONENTS_732_SP004_000029, CRM_JAVA_WEB_COMPONENTS_732_SP999999_999999, SAP_SHARED_JAVA_APPLIC_50_SP021_000026, SAP_SHARED_JAVA_APPLIC_50_SP999999_999999, SAP_SHARED_JAVA_APPLIC_60_SP011_000022, SAP_SHARED_JAVA_APPLIC_60_SP999999_999999, SAP_SHARED_JAVA_APPLIC_70_SP012_000027, SAP_SHARED_JAVA_APPLIC_70_SP999999_999999, SAP_SHARED_JAVA_APPLIC_701_SP009_000026, SAP_SHARED_JAVA_APPLIC_701_SP999999_999999, SAP_SHARED_JAVA_APPLIC_702_SP004_000039, SAP_SHARED_JAVA_APPLIC_702_SP999999_999999, SAP_SHARED_JAVA_APPLIC_730_SP012_000028, SAP_SHARED_JAVA_APPLIC_730_SP999999_999999, SAP_SHARED_JAVA_APPLIC_731_SP009_000029, SAP_SHARED_JAVA_APPLIC_731_SP999999_999999, SAP_SHARED_JAVA_APPLIC_732_SP004_000029, SAP_SHARED_JAVA_APPLIC_732_SP999999_999999, SAP_SHARED_JAVA_COMP_701_SP009_000026, SAP_SHARED_JAVA_COMP_701_SP999999_999999, SAP_SHARED_JAVA_COMP_702_SP004_000039, SAP_SHARED_JAVA_COMP_702_SP999999_999999, SAP_SHARED_JAVA_COMP_730_SP012_000028, SAP_SHARED_JAVA_COMP_730_SP999999_999999, SAP_SHARED_JAVA_COMP_731_SP009_000029, SAP_SHARED_JAVA_COMP_731_SP999999_999999, SAP_SHARED_JAVA_COMP_732_SP004_000029, SAP_SHARED_JAVA_COMP_732_SP999999_999999, SAP_SHARED_JAVA_COMPONENTS_50_SP021_000026, SAP_SHARED_JAVA_COMPONENTS_50_SP999999_999999, SAP_SHARED_JAVA_COMPONENTS_60_SP011_000022, SAP_SHARED_JAVA_COMPONENTS_60_SP999999_999999, SAP_SHARED_JAVA_COMPONENTS_70_SP012_000027, SAP_SHARED_JAVA_COMPONENTS_70_SP999999_999999, SAP_SHARED_WEB_COMPONENTS_50_SP021_000026, SAP_SHARED_WEB_COMPONENTS_50_SP999999_999999, SAP_SHARED_WEB_COMPONENTS_60_SP011_000022, SAP_SHARED_WEB_COMPONENTS_60_SP999999_999999, SAP_SHARED_WEB_COMPONENTS_70_SP012_000027, SAP_SHARED_WEB_COMPONENTS_70_SP999999_999999, SAP_SHARED_WEB_COMPONENTS_701_SP009_000026, SAP_SHARED_WEB_COMPONENTS_701_SP999999_999999, SAP_SHARED_WEB_COMPONENTS_702_SP004_000039, SAP_SHARED_WEB_COMPONENTS_702_SP999999_999999, SAP_SHARED_WEB_COMPONENTS_730_SP012_000028, SAP_SHARED_WEB_COMPONENTS_730_SP999999_999999, SAP_SHARED_WEB_COMPONENTS_731_SP009_000029, SAP_SHARED_WEB_COMPONENTS_731_SP999999_999999, SAP_SHARED_WEB_COMPONENTS_732_SP004_000029, SAP_SHARED_WEB_COMPONENTS_732_SP999999_999999)
Описание
Information such as order details can be discovered using CRM-ISA-BBS. This information may be used by an attacker to further target Web Channel Business-to-Business web shop.
Как исправить
This note contains Java correction(s) for E-Commerce and Web Channel.Apply the Support Package patch level attached to this note.For more information about applying Java patches, refer to Note 877887.See Note 1546959 for information about the patch strategy.
Ссылки
