Directory traversal in XX-CSC-AT, SAP security note 1597402

SAP security note 1597402, “Directory Traversal in XX-CSC-AT”, is a program error note released on 08.11.2011. Below are the symptom, SAP recommended solution and the affected software components.

Description

Symptom

There is a potential directory traversal vulnerability in the following component: XX-CSC-AT.

Solution

Refer to Note 1497003 for additional information and instructions. The corrections from this note are a prerequisite for implementing Note 1597402.

Reason and prerequisites

Vulnerabilities in the correction instructions allow malicious users to read arbitrary files on the remote server, potentially disclosing confidential information. Vulnerabilities also permit malicious users to write arbitrary files on the remote server, which could corrupt data or alter system behavior.

CVSS

Score 0

References

• 1497003 – Potential directory traversals in applications

Affected components

• SAP_APPL, versions 46C, 470, 500, 600, 602, 603, 604, 605