SAP security note 1787460, “Directory traversal in IS-DFS-OF-MPO”, is a note released on 20.02.2013. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
A read-only directory traversal vulnerability exists in IS-DFS-OF-MPO, allowing attackers to read arbitrary files on the remote server. This can potentially lead to the disclosure of confidential information.
Solution
Apply the correction instructions provided in SAP Security Note 1787460. Ensure that all relevant support packages are updated as per the guidance in the note.
Reason and prerequisites
The vulnerability arises because IS-DFS-OF-MPO fails to properly validate the file paths used to reference files on the remote server. This inadequate validation allows an attacker to manipulate the path, directing the program to access unauthorized files and disclosing their contents.
References
Referenced by
- SAP Note 1947949 – indicates this note may be too restrictive in certain scenarios
Affected components
- IS-DFS-OF-MPO: EA-DFPS 200, 500, 600, 603, 604, 605, 606, 616
Full note on SAP: SAP Support Launchpad note 1787460
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].