SAP security note 1493379, "Directory traversal in the SCM Optimizers", is a program error note released on 14.12.2010. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
An error in the SCM Optimizer Framework contains a vulnerability through which a malicious user can potentially write arbitrary files on the remote server, possibly corrupting data or altering system behavior.
Solution
Implement the source code corrections from the attached correction instructions from APO 3.0 to SCM 7.0 Enhancement Package 1.
Reason and prerequisites
The SCM Optimizer Framework fails to correctly validate the path a user-submitted file is written to. Through this, an attacker can potentially overwrite data on the remote system.
References
This note refers to
Affected components
- SAP_APO 30A
- SAP_APO 310
- SCM 400
- SCM 410
- SCM 500
- SCM 510
- SCM 700
- SCM 701
Full note on SAP: SAP Support Launchpad note 1493379
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].