Skip links
Picture of Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

Directory Traversal batch input BOMs, SAP security note 1524781

SAP Note 1524781

SAP security note 1524781, "Directory Traversal batch input BOMs", is a note. Below are the symptom, SAP recommended solution and the affected software components.

ComponentLogistics – General > Logistics Basic Data > Bills of Material (LO-MD-BOM)

Description

Symptom

A malicious user can exploit the directory traversal vulnerability to overwrite data in the remote system or overwrite existing data.

Solution

Apply the corrections as specified in this note to address the directory traversal vulnerability. Detailed correction instructions can be found here.

CVSS

Score 0

References

Affected components

  • SAP_APPL versions 31I, 40B, 45B, 46B, 46C, 470, 500, 600, 602, 603, 604, 605

Full note on SAP: SAP Support Launchpad note 1524781

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

Explore More