Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
(AV:N/AC:M/AU:S/C:P/I:P/A:PSAP)
Производитель ПО
Наименование ПО
SAP Notes
(1868012-3)
SAP Support Packages
(SAPK-500B2INSAPHRCCH, SAPK-60097INSAPHRCCH, SAPK-60463INSAPHRCCH)
Описание
PY-CH does not contain required checks against a positive set of allowed functions (i.e. whitelist) during execution of these functions. This is required to verify that authenticated users are allowed to access these functions. The missing check may result in undesired system behavior.
Как исправить
Implement support package or correction instructions.
Ссылки
