Skip links
Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

BCA Potential Directory Traversal, SAP security note 1502766

Description

Potential Directory Traversal in the following components:

  • IS-B-BCA
  • FIN-FSCM-IHC

Available fix and Supported packages

  • EA-FINSERV | 110 | 110
  • EA-FINSERV | 200 | 200
  • EA-FINSERV | 500 | 500
  • EA-FINSERV | 600 | 600
  • EA-FINSERV | 603 | 603
  • EA-FINSERV | 604 | 604
  • EA-FINSERV | 605 | 605
  • BANK/CFM | 463_20 | 463_20
  • EA-FINSERV 605 | SAPK-60502INEAFINSRV |
  • EA-FINSERV 500 | SAPKGPFC24 |
  • EA-FINSERV 600 | SAPKGPFD19 |
  • EA-FINSERV 603 | SAPK-60308INEAFINSRV |
  • EA-FINSERV 604 | SAPK-60409INEAFINSRV |
  • EA-FINSERV 605 | SAPK-60503INEAFINSRV |
  • EA-FINSERV 110 | SAPKGPFA32 |
  • EA-FINSERV 200 | SAPKGPFB21 |
  • EA-FINSERV 605 | SAPK-60504INEAFINSRV |
  • BANK/CFM 463_20 | SAPKIPBJ40 |

Affected component

    IS-B-BCA-AM
    Account Management

CVSS

Score: 0

PoC

Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.

URL

https://launchpad.support.sap.com/#/notes/1502766

TAGS

#Path-traversal
#BKK_PAYMEX_DE_DTA_FILE
#BKK_PAYMEX_DE_DTA_OK_FILE
#BKK_PAYMIN_DE_DTA_FILE
#BKK_PAYMIN_DE_DTA_OK_FILE
#BKK_PAYMEX_DE_DTA_PATH
#BKK_PAYMIN_DE_DTA_PATH

More to explorer

Special offer for SAP Security Udemy course!

$ 9.99

Join “SAP Security Core Concepts and Security Administration” which is part of the Blackhat course series.