HCMPotential Directory Traversal in Payroll Singapore PY-SG, SAP security note 1517828

SAP security note 1517828, "HCM: Potential Directory Traversal in Payroll Singapore PY-SG", is a program error note released on December 14, 2010. Below are the symptom, SAP recommended solution, reason and prerequisites, CVSS score, references and affected software components.

Description

Symptom

Potential Directory Traversal in PY-SG.

Solution

Refer to Note 1497003 for additional information and instructions. Ensure that corrections from the following notes are implemented before applying this security note:

• Note 1497003
• Note 1507935
• Note 1515775

Reason and prerequisites

Programs in the correction instructions of Note 1515775 contain vulnerabilities that allow malicious users to read arbitrary files on the remote server, potentially disclosing confidential information. Some programs in the correction instructions of Note 1515775 also have vulnerabilities that enable malicious users to write arbitrary files on the remote server, potentially corrupting data or altering system behavior.

CVSS

Score 0

References

Affected components

• SAP_HR (46B, 46C)
• SAP_HRCSG (470, 500, 600, 604)