SAP security note 1673455, "Directory traversal in SAP CRM Mobile Sales (IPC Server)", is a program error note released on 12.06.2012. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
The IPC server used by SAP CRM Mobile Sales contains a vulnerability through which an attacker can potentially read or write arbitrary files on the remote server, possibly disclosing confidential information, corrupting data, or altering system behavior.
Solution
To correct the issue, apply the Java patch valid for your CRM release from the SAP Service Marketplace.
Reason and prerequisites
The IPC server used by SAP CRM Mobile Sales fails to correctly validate the path to which a user-submitted file is written or that is used to reference a file that is read from the remote server. As a result, an attacker can potentially direct the program to an arbitrary other file in the system, disclosing its contents or overwriting data in the remote system.
Affected components
- Customer Relationship Management > Internet Pricing and Configurator (CRM-IPC)
Full note on SAP: SAP Support Launchpad note 1673455
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
