Skip links
Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

Directory traversal in report fr importing confirmation file, SAP security note 1527437

Description

Due to an error in the report for importing the confirmation file, any files can be read using the network.

Available fix and Supported packages

  • FSAPPL | 100 | 100
  • FSAPPL | 200 | 200
  • FSAPPL | 300 | 300
  • BANK-TRBK | 30 | 30
  • BANK-TRBK | 40 | 40
  • FSAPPL 200 | SAPKISC314 |
  • FSAPPL 100 | SAPKISC215 |
  • FSAPPL 300 | SAPK-30007INFSAPPL |
  • BANK-TRBK 30 | SAPKISCC12 |
  • BANK-TRBK 40 | SAPKISC109 |

Affected component

    FS-AM-CM-CA
    Card

CVSS

Score: 0

PoC

Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.

URL

https://launchpad.support.sap.com/#/notes/1527437

TAGS

#Directory
#traversal
#confirmation-file

More to explorer

Special offer for SAP Security Udemy course!

$ 9.99

Join “SAP Security Core Concepts and Security Administration” which is part of the Blackhat course series.