Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1876993-1)
SAP Support Packages
(SAPK-10005INUI2700, SAPK-10005INUI2FND)
Описание
The UI2 Pagebuilding service does not contain authorization checks for checking an authenticated user's authorization to access some of its functions. This may result in undesired system behavior.
Как исправить
Apply the note. Please make sure, that the user has got the following authorization for authorization object /UI2/CHIP with CHIP_NAME= and ACTVT=16 (Execute).Alternatively, the user needs the authoritation object S_PB_CHIP with activity 16 (execute) for the CHIP.
Ссылки
