SAP security note 1514432, "CM: Potential directory traversal issues", is a note. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
Potential Directory Traversal.
Solution
Please refer to note 1497003 for additional information and instructions. The corrections from note 1497003 are a prerequisite for implementation of this note.
Reason and prerequisites
The programs contained in the correction instructions contain vulnerabilities through which a malicious user can potentially read arbitrary files on the remote server, possibly disclosing confidential information.
Some of the programs contained in the correction instructions contain a vulnerability through which a malicious user can potentially write arbitrary files on the remote server, possibly corrupting data or altering system behavior.
References
Affected components
- INSURANCE 471
- INSURANCE 472
- INSURANCE 600
- INSURANCE 602
- INSURANCE 603
- INSURANCE 604
- INSURANCE 605
Full note on SAP: SAP Support Launchpad note 1514432
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
