SAP security note 1478755, "Code Injection Vulnerability in CL_FILA_RE_TRANCHE", is a note. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
Package FI_LA_RE_APPL, Class CL_FILA_RE_TRANCHE, Method DOWNLOAD_TRANCHE contains code that allows the execution of arbitrary program code of the user’s choice. A malicious user can therefore control the behavior of the system or potentially escalate privileges by executing malicious code without legitimate credentials.
Solution
Please apply the attached correction instruction.
Reason and prerequisites
The program code allows a user to define and execute code that changes the system’s behavior. A valid and authenticated user is required. Depending on the code, the user can inject and run their own code, obtain additional information, modify or delete data, alter system output, create new users with higher privileges, or perform a denial of service attack.
Affected components
- EA-APPL: Versions 600, 602, 603, 604, 605
Full note on SAP: SAP Support Launchpad note 1478755
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].