CVE:CVE-2013-3061
CNNVD:CNNVD-201304-405
SAP Industry-Specific Components for Hospitals (IS-H) 用于医院的特定行业组件(IS-H)。
SAP Healthcare Industry Solution，SAP ERP 核心组件(又名ECC 6)中的IS-H Industry-Specific Component Hospital子系统中的‘ISHMED-PATRED_TRANSACT_RFCCALL’函数中存在漏洞。远程经过授权的攻击者可通过未明的向量利用该漏洞绕过既定的交易限制。
solution:Upgrade sap erp_cental_component to a higher version than -; Upgrade sap healthcare_industry_solution to a higher version than -