High priority
SAP security note 1966029, “Directory Traversal Vulnerability in SAP Environment Health and Safety”, is a program error note released on March 10, 2020. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
SAP has released Security Note 1966029 addressing a critical directory traversal vulnerability in the SAP Environment Health and Safety (EHS) module. This vulnerability allows attackers to read and write arbitrary files on the remote server, potentially leading to the disclosure, corruption, or alteration of confidential information.
The EHS module fails to properly validate file paths used to reference files on the remote server. This allows an attacker to manipulate the path, enabling unauthorized access to arbitrary files. Additionally, the vulnerability permits overwriting of data on the remote system.
Solution
To mitigate this vulnerability, SAP recommends applying the specified support packages or following the provided correction instructions.
CVSS
Score 7.3 Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Affected components
- Environment, Health, and Safety / Product Compliance > Product Safety (EHS-SAF)
- Specification Management (Module)
Full note on SAP: SAP Support Launchpad note 1966029
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].