CA-CL Directory traversal vulnerability, SAP security note 1807196

SAP security note 1807196, “CA-CL: Directory traversal vulnerability”. Below are the symptom, SAP recommended solution and the affected software components.

Description

Symptom

CA-CL contains a vulnerability that allows an attacker to potentially read arbitrary files on the remote server, which may disclose confidential information. Additionally, it enables an attacker to write arbitrary files to the remote server, potentially corrupting data or altering system behavior.

Solution

Implement this SAP Note to address the vulnerability.

CVSS

Score 2.3 Vector: AV:A/AC:M/AU:S/C:P/I:N/A:N

Affected components

• SAP_APPL 31I
• SAP_APPL 40B
• SAP_APPL 45A – 45B
• SAP_APPL 46B
• SAP_APPL 46C
• SAP_ABA 620
• SAP_ABA 640
• SAP_ABA 700 – 702
• SAP_ABA 710 – 711
• SAP_ABA 730
• SAP_ABA 731
• SAP_ABA 740