Description
If you include a directory traversal sequence in an HTTP request, files on the server can be accessed with the same privileges as the user who started the IGS.
Available fix and Supported packages
- BC-FES-IGS | 6.40 | 6.40
- BC-FES-IGS | 7.00 | 7.00
Affected component
- BC-FES-IGS
Internet Graphics Server
CVSS
Score: 0
Exploit
Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.
URL
https://launchpad.support.sap.com/#/notes/865403
