SAP security note 1502918, "Directory Traversal in Archivelink function modules". Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
Archivelink Function module contains a vulnerability through which a malicious user can potentially read arbitrary files on the remote server, possibly disclosing confidential information.
Solution
Refer to Note 1497003 for additional information and instructions. The corrections from Note 1497003 are a prerequisite for implementation of this note.
Reason and prerequisites
Archivelink Function module fails to correctly validate the path with which a file that is read from the remote server is referenced. This means that an attacker can potentially point the program to an arbitrary other file on the system, disclosing its contents.
CVSS
Score 0
References
This note refers to
Affected components
- SAP_BASIS: versions 6.40, 7.00 to 7.02, 7.10 to 7.30
Full note on SAP: SAP Support Launchpad note 1502918
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].