SAP security note 1522150, "Directory Traversal in BC-SRV-KPR-CMS". Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
BC-SRV-KPR contains a vulnerability that allows a malicious user to potentially read arbitrary files on the remote server, possibly disclosing confidential information.
Solution
Refer to Note 1497003 for additional information and instructions. The corrections from Note 1497003 are required before implementing this note.
Logical File Names Used in this Solution:
- KPRO_IMPORT_EXPORT
Reason and prerequisites
BC-SRV-KPR fails to correctly validate the path used to reference a file read from the remote server. This allows an attacker to point the program to an arbitrary file on the system, disclosing its contents. Prerequisite: Note 1497003.
Affected components
- BC-SRV-KPR
Full note on SAP: SAP Support Launchpad note 1522150
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
