SAP security note 2056333, “Directory traversal in IS-ADEC-SPC”. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
SPEC2000 contains a vulnerability through which an attacker can potentially read arbitrary files on the remote server, possibly disclosing confidential information.
Solution
Implement the relevant support package or follow the attached correction instructions.
Reason and prerequisites
SPEC2000 fails to correctly validate the path that is used to reference a file that is read from the remote server. As a result, an attacker can potentially direct the program to an arbitrary other file in the system, disclosing its contents.
CVSS
Score 2.3 / 10 Vector: AV:A/AC:M/Au:S/C:P/I:N/A:N
Affected components
- ECC-DIMP: 600, 602, 603, 604, 605, 606, 616, 617
Full note on SAP: SAP Support Launchpad note 2056333
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].