SAP Note 1865372
Medium priority
Medium priority
SAP security note 1865372, "Directory traversal in Financials", is a note released on 07.08.2014. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
Financials Applications contain a vulnerability that allows an attacker to perform directory traversal, potentially enabling the writing of arbitrary files to the remote server. This could result in data corruption or altered system behavior.
Solution
Apply the relevant support package or follow the correction instructions provided in the SAP Security Note.
Affected components
- Financial Accounting (FI-GL)
- Accounts Receivable (FI-AR)
- Accounts Payable (FI-AP)
Full note on SAP: SAP Support Launchpad note 1865372
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].