MM Potential Directory Traversal, SAP security note 1510478

SAP security note 1510478, "MM: Potential Directory Traversal". Below are the symptom, SAP recommended solution and the affected software components.

Description

Symptom

Potential Directory Traversal vulnerabilities in the MM area. Malicious users may be able to read arbitrary files on the remote server, potentially disclosing confidential information or corrupting data.

Solution

• Apply the Correction Instructions: Follow the instructions provided in this note to address the directory traversal vulnerabilities.
• Refer to Note 1497003: For additional information and instructions, refer to Note 1497003.

Reason and prerequisites

The programs in the correction instructions contain vulnerabilities that allow unauthorized file access. Before applying this note, ensure that you have implemented the corrections from Note 1497003 as they are a prerequisite for this update.

References

• 1497003 – Potential directory traversals in applications

Affected components

• Materials Management > Purchasing > Basic Functions (MM-PUR-GF)
• Logistics Execution > Warehouse Management (LE-WM)
• SAP_APPL: Versions 31I, 40B, 45B, 46B, 46C, 470, 500, 600, 602, 603, 604, and 605