SAP Security Note
High priority
SAP security note 1658791, “Directory Traversal Vulnerability in Deposits Management”, is a program error note released on 14.02.2012. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
The Deposits Management component fails to properly validate the path for user-submitted files. As a result, an attacker can exploit this weakness to overwrite data on the remote system, leading to potential data corruption or unauthorized system modifications.
Solution
To mitigate this vulnerability, apply the corrections provided in Note 1497003. The corrections from this prerequisite note must be implemented before applying Security Note 1658791.
References
This note refers to
Affected components
- FSAPPL 300
- FSAPPL 400
Full note on SAP: SAP Support Launchpad note 1658791
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].