SAP Security Note
High priority
SAP security note 1591517, "Directory traversal in CRM IPC", is a program error note released on 20.01.2014. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
This security note has been updated. For more detailed information, see Security Note 1966829.
One or more components associated with the price determination trace contains a vulnerability through which a malicious user can potentially read arbitrary files on the remote server, possibly disclosing confidential information.
Solution
To correct the issue, apply the Java patch valid for your CRM release from the SAP Service Marketplace.
Reason and prerequisites
One or more components fail to correctly validate the path that is used to reference a file that is read from the remote server. As a result, a malicious user can potentially direct the program to an arbitrary other file in the system, disclosing its contents.
Affected components
- SAP-CRMJAV: 5.0, 6.0, 700, 701
- SAP-CRMWEB: 5.0, 6.0, 700, 701
- SAP-SHRWEB: 5.0, 6.0, 700, 701, 702
- SAP-SHRJAV: 5.0, 6.0, 700, 701, 702
- SAP-CRMAPP: 701
- SAP-SHRAPP: 5.0, 6.0, 700, 701, 702
Full note on SAP: SAP Support Launchpad note 1591517
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
