FI-Potential Directory Traversal J_1AF014, SAP security note 1593605

SAP security note 1593605, "FI-Potential Directory Traversal: J_1AF014". Below are the symptom, SAP recommended solution and the affected software components.

Description

Symptom

Potential Directory Traversal vulnerability in program J_1AF014.

The correction instructions for this note contain vulnerabilities that allow malicious users to:

• Read arbitrary files on the remote server, potentially disclosing confidential information.
• Write arbitrary files on the remote server, possibly corrupting data or altering system behavior.

Solution

Refer to SAP Note 1497003 for additional information and instructions. The corrections from this note are prerequisites for implementing this note.

Affected components

• SAP_APPL (46C, 470, 500, 600, 602, 603, 604, 605)