SAP security note 1782959, "Directory traversal in XX-CSC-BR". Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
Potential Directory Traversal in XX-CSC-BR.
Read-write or write directory traversal: The function group contained in the correction instructions contains a vulnerability through which an attacker can potentially write arbitrary files to the remote server, possibly corrupting data or altering system behavior.
Solution
Please refer to note 1497003 for additional information and instructions. The corrections from note 1497003 are a prerequisite to implement this note.
Reason and prerequisites
Read-write or write directory traversal: The function group contained in the correction instruction fails to correctly validate the path to which a user-submitted file is written. As a result, an attacker can potentially overwrite data in the remote system.
References
Affected components
- SAP_APPL from 46C to 46C
- SAP_APPL from 470 to 470
- SAP_APPL from 500 to 500
- SAP_APPL from 600 to 600
- SAP_APPL from 602 to 602
- SAP_APPL from 603 to 603
- SAP_APPL from 604 to 604
- SAP_APPL from 605 to 605
- SAP_APPL from 606 to 606
- SAP_APPL from 616 to 616
Full note on SAP: SAP Support Launchpad note 1782959
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
