SAP security note 1608454, “Directory traversal in IS-H-BD”, is a program error note released on 11.10.2011. Below are the symptom and SAP recommended solution.
Description
Symptom
Potential directory traversal in the following components: IS-H-BD.
Impact: Confidentiality – unauthorized reading of sensitive files. Integrity – potential corruption or alteration of system data. Availability – possible disruption of system behavior.
Solution
Implement the correction instructions provided in SAP Note 1608454. Ensure that all prerequisites are met before applying the corrections:
- SAP Note 1497003: Potential directory traversals in applications.
- SAP Note 1510407: Directory Traversal Vulnerability in IS-H.
Full note on SAP: SAP Support Launchpad note 1608454
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].