SAP Security Note
Medium priority
SAP security note 1964202, "Directory traversal in Invoice Register for Lithuania", is a note released on 18.02.2014. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
The Invoice Register for Lithuania contains a directory traversal vulnerability that allows an attacker to write arbitrary files to the remote server. This can lead to data corruption or alteration of system behavior.
Solution
- Apply Manual Corrections: Download and apply the manual corrections provided in the attachment Guide – Logical File Path, Name_1964202.docx.
- Apply Code Corrections: Use transaction SNOTE to apply the code correction instructions from this note. Ensure that you have previously applied corrections from Note 1497003, as they are prerequisites for implementing this note.
Reason and prerequisites
The vulnerability arises because the Invoice Register for Lithuania does not properly validate the file path to which user-submitted files are written. An attacker can exploit this flaw to overwrite data in the remote system.
References
Affected components
- C-CEE from 110_600 to 110_600
- C-CEE from 110_602 to 110_602
- C-CEE from 110_603 to 110_603
- C-CEE from 110_604 to 110_604
Full note on SAP: SAP Support Launchpad note 1964202
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
