Skip links
RedRays - Your SAP Security Solution
Picture of Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

SAP Security on Udemy

Market Data Interface Potential Directory Traversal, SAP security note 1509869

SAP Note 1509869SAP Security NoteHigh priority

SAP security note 1509869, "Market Data Interface: Potential Directory Traversal", is a program error note released on 14.12.2010. Below are the SAP recommended solution and the affected software components.

ComponentFIN-FSCM-TRM (Financial Supply Chain Management > Treasury and Risk Management)
CategoryProgram error
PriorityCorrection with high priority
TypeSAP Security Note
Version5
StatusReleased for Customer
Released on14.12.2010

Description

Solution

To mitigate this vulnerability, apply the correction instructions provided in Note 1497003. These corrections are prerequisites for implementing this note.

References

This note refers to

  • 1511995 – CML/FIN-FSCM-CM: Potential Directory Traversal
  • 1509403 – Potential directory traversals in transaction TVDT
  • 1497003 – Potential directory traversals in applications

Affected components

  • Financial Supply Chain Management > Treasury and Risk Management > Basic Functions (FIN-FSCM-TRM-BF)
  • Treasury > Treasury Management (TR-TM)
  • Treasury > Risk Management > Master Data (TR-MRM-MD)
  • Other related sub-components as detailed in the note.

Full note on SAP: SAP Support Launchpad note 1509869

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

#FIN-FSCM-TRM#FIN-FSCM-TRM-BF#TR-TM#TR-MRM-MD

Explore More