Description
An authenticated user can use functions of the portal connection of the agency business to which access should be restricted. This may result in an escalation of privileges.
We strongly advise you to implement this note to solve the security problem.
Available fix and Supported packages
- EA-RETAIL | 200 | 200
- EA-RETAIL | 500 | 500
- EA-RETAIL | 600 | 600
- EA-RETAIL | 602 | 602
- EA-RETAIL | 603 | 603
- EA-RETAIL | 604 | 604
- EA-RETAIL | 605 | 605
- EA-RETAIL 200 | SAPKGPRB21 |
- EA-RETAIL 605 | SAPK-60504INEARETAIL |
- EA-RETAIL 500 | SAPKGPRC25 |
- EA-RETAIL 600 | SAPKGPRD20 |
- EA-RETAIL 602 | SAPK-60210INEARETAIL |
- EA-RETAIL 603 | SAPK-60309INEARETAIL |
- EA-RETAIL 604 | SAPK-60410INEARETAIL |
Affected component
- LO-AB-BSP
Business Server Pages
CVSS
Score: 0
PoC
Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.
URL
https://launchpad.support.sap.com/#/notes/1557197
