Directory traversal in PY-NL-RP, PA-PA-NL and PA-PF-NL, SAP security note 1760776

SAP security note 1760776, "Directory traversal in PY-NL-RP, PA-PA-NL and PA-PF-NL," is a note covering the symptom, SAP recommended solution and the affected software components.

Description

Symptom

This SAP Security Note addresses a directory traversal vulnerability in the following components: PY-NL-RP, PA-PA-NL, PA-PF-NL.

An attacker can exploit this vulnerability to write arbitrary files to the remote server, potentially corrupting data or altering system behavior.

Solution

To mitigate this vulnerability, apply the correction instructions provided in this note. This involves updating the relevant software components and performing manual activities as outlined below.

References

Affected components

• Personnel Management > Pension Schemes > Pension Fund Netherlands (PA-PF-NL)
• Personnel Management > Personnel Administration > Netherlands (PA-PA-NL)