SAP security note 1510642, "Directory Traversal in foreign trade". Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
Possible directory traversal in the aforementioned components could allow unauthorized access to files.
Solution
The solution involves applying corrections from Note 1497003. These corrections are necessary to implement the fix provided in this note.
Logical file names used: FT_DECLARATION_FILENAME, FT_BAFA_FILENAME. Logical file paths FT_ROOT_DECLARATIONS and FT_ROOT_BAFA are used to validate physical file names.
Reason and prerequisites
Vulnerabilities in the programs could allow reading of arbitrary files on the server.
Vulnerabilities could allow storing of arbitrary files, potentially corrupting data and impacting system behavior.
References
This note refers to
Affected components
- SD-FT-GOV
- MM-FT-GOV
- SD-FT-CON
- SAP_APPL 470
- SAP_APPL 500
- SAP_APPL 600
- SAP_APPL 602
- SAP_APPL 603
- SAP_APPL 604
- SAP_APPL 605
Full note on SAP: SAP Support Launchpad note 1510642
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].