Description
Write directory traversal in Product control summary report contains a vulnerability through which a malicious user can potentially change arbitrary files on the application server, possibly corrupt-ing data.
Available fix and Supported packages
- IS-OIL | 46C | 46C
- IS-OIL | 472 | 472
- IS-OIL | 600 | 600
- IS-OIL | 602 | 602
- IS-OIL | 603 | 603
- IS-PRA | 604 | 604
- IS-PRA | 605 | 605
- IS-OIL 46C | SAPKI4C139 |
- IS-OIL 472 | SAPKI47059 |
- IS-OIL 600 | SAPK-60019INISOIL |
- IS-OIL 602 | SAPK-60209INISOIL |
- IS-OIL 603 | SAPK-60308INISOIL |
- IS-PRA 604 | SAPK-60409INISPRA |
- IS-PRA 605 | SAPK-60503INISPRA |
Affected component
- XX-INT-SR
Security Response
CVSS
Score: 0
PoC
Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.
URL
https://launchpad.support.sap.com/#/notes/1509975