SAP security note 1489912, "BCA: Potential Directory Traversal". Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
A potential directory traversal vulnerability exists in the IS-B-BCA and FIN-FSCM-IHC components, allowing malicious users to write arbitrary files on the remote server. This could lead to data corruption or altered system behavior.
Solution
Apply the provided correction or update to the relevant support package. Detailed instructions and support packages are available to address this vulnerability.
Reason and prerequisites
The vulnerability arises from a flaw in the program contained within the correction instructions. This flaw permits unauthorized file writes on the server, posing risks such as data corruption and system manipulation.
CVSS
Score 0
References
Affected components
- Industry-Specific Components > Bank > Bank Current Accounts > Account Management (IS-B-BCA-AM)
- Financial Supply Chain Management > FSCM In-House Cash (FIN-FSCM-IHC)
Full note on SAP: SAP Support Launchpad note 1489912
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].