SAP Security Note
High priority
SAP security note 1600105, "Directory Traversal in SWIFT File Adapter", is a note released on April 8, 2014. Below are the symptom, SAP recommended solution, affected software components and references.
Description
Symptom
The SWIFT File Adapter contains a vulnerability that allows a malicious user to write arbitrary files on the remote server, potentially corrupting data or altering system behavior.
Solution
Import the specified Support Package to address the vulnerability.
Reason and prerequisites
The SWIFT file adapter does not correctly validate the path for user-submitted files. This flaw enables an attacker to overwrite data in the remote system.
References
Affected components
- SWIFT: Versions 602 and 6.22
Full note on SAP: SAP Support Launchpad note 1600105
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
