SAP security note 1518587, "EC-CS: Potential Directory Traversal" Below are the symptom, reason and prerequisites, SAP recommended solution and affected software components.
Description
Symptom
Potential Directory Traversal in the EC-CS component. These vulnerabilities may allow a malicious user to read arbitrary files on the remote server, potentially disclosing confidential information, or to write arbitrary files, possibly corrupting data or altering system behavior.
Solution
Refer to SAP Note 1497003 and ensure that all prerequisites outlined there are implemented. Then follow the correction instructions provided in this note to mitigate the directory traversal vulnerabilities.
- Logical file name ECCS_FILE_VALIDATE uses the logical file path ECCS_ROOT.
- See SAP Note 1498832 for guidance on setting up logical file names in the context of file name validation.
Reason and prerequisites
Vulnerabilities exist in the programs contained in the correction instructions, enabling unauthorized file access. Implementing the corrections from SAP Note 1497003 is a prerequisite for applying this security note.
Affected components
- SAP_APPL (40A to 605)
Full note on SAP: SAP Support Launchpad note 1518587
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].