Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP HANA
(SAP HANA)
Описание
For each AFL area two roles exists. For PAL and BFL the roles are:
● AFL__SYS_AFL_AFLPAL_EXECUTE
● AFL__SYS_AFL_AFLPAL_EXECUTE_WITH_GRANT_OPTION
● AFL__SYS_AFL_AFLBFL_EXECUTE
● AFL__SYS_AFL_AFLBFL_EXECUTE_WITH_GRANT_OPTION
User _SYS_AFL is the creator and owner of these roles. User SYSTEM has the privileges to
grant these roles to users. User _SYS_REPO has the respective role with grant option
granted automatically.
Grant these roles only to users who need to execute PAL and BFL procedures.
You can verify whether a user or role has any predefined AFL roles by querying the
EFFECTIVE_ROLE_GRANTEES system view.
● AFL__SYS_AFL_AFLPAL_EXECUTE
● AFL__SYS_AFL_AFLPAL_EXECUTE_WITH_GRANT_OPTION
● AFL__SYS_AFL_AFLBFL_EXECUTE
● AFL__SYS_AFL_AFLBFL_EXECUTE_WITH_GRANT_OPTION
User _SYS_AFL is the creator and owner of these roles. User SYSTEM has the privileges to
grant these roles to users. User _SYS_REPO has the respective role with grant option
granted automatically.
Grant these roles only to users who need to execute PAL and BFL procedures.
You can verify whether a user or role has any predefined AFL roles by querying the
EFFECTIVE_ROLE_GRANTEES system view.
Как исправить
Ссылки
