SAP security note 1694662, "Directory Traversal in SAP System Log". Below are the symptom and SAP recommended solution.
Description
Symptom
SAP System Log contains a vulnerability through which an attacker can potentially read arbitrary files on the remote server, possibly disclosing confidential information.
Solution
The correction disables input of file name and restricts access to file name calculated in SAP System Log.
Apply the support package mentioned in this note or the respective correction instruction.
Reason and prerequisites
SAP System Log fails to correctly validate the path that is used to reference a file that is read from the remote server. As a result, an attacker can potentially direct the program to an arbitrary other file in the system, disclosing its contents.
Full note on SAP: SAP Support Launchpad note 1694662
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].