UPDATE 27 August 2019: This note has been revised and released with adjusted correction instructions for Release 700 and 710. Due to the dedicated ST-PI delivery track, the SAP Note seems to have only been delivered in ST-PI 2008_1_46C with SP 0009 (SAPKITLRA9) and not in the other equivalent support package tracks of the other ST-PI releases. However, this delivery was made automatically in the equivalent support packages without the “Support Packages & Patches” specification being created. To explicitly specify the validity, the validity of the correction instructions 700/710 that are still being delivered was manually restricted to ST-PI 2008_1_700 SAPKITLRD8 SP 0008 and ST-PI 2008_1_710 SAPKITLRE8 SP 0008. A CVSS rating has also been added.

ASU Toolbox contains a vulnerability through which an attacker can potentially read arbitrary files on the remote server, possibly disclosing confidential information.