SAP Note 1502539
SAP Security Note
High priority
SAP Security Note
High priority
SAP security note 1502539, "Directory traversal in job commander", is a program error note released on 14.12.2010. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
Errors in the "Job commander" application permit access to files in the application server file system.
Solution
Import the Support Package or implement the attached correction instructions.
The function modules are obsolete and are deactivated when you implement the corrections.
Reason and prerequisites
The job commander does not carry out an adequate check for access to files.
References
Full note on SAP: SAP Support Launchpad note 1502539
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].