Skip links
Arpine Maghakyan

Arpine Maghakyan

Security Researcher of RedRays.

Directory traversal in report fr importing confirmation file, SAP security note 1527437

Description

Due to an error in the report for importing the confirmation file, any files can be read using the network.

Available fix and Supported packages

  • FSAPPL | 100 | 100
  • FSAPPL | 200 | 200
  • FSAPPL | 300 | 300
  • BANK-TRBK | 30 | 30
  • BANK-TRBK | 40 | 40
  • FSAPPL 200 | SAPKISC314 |
  • FSAPPL 100 | SAPKISC215 |
  • FSAPPL 300 | SAPK-30007INFSAPPL |
  • BANK-TRBK 30 | SAPKISCC12 |
  • BANK-TRBK 40 | SAPKISC109 |

Affected component

    FS-AM-CM-CA
    Card

CVSS

Score: 0

Exploit

Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.

URL

https://launchpad.support.sap.com/#/notes/1527437

TAGS

#Directory
#traversal
#confirmation-file

More to explorer

SAP Cloud Connector Certificate Validation Issue

Date of Release: February 13, 2024 Advisory ID: CVE-2024-25642 Affected Software: SAP Cloud Connector Versions Affected: 2.15.0 to 2.16.1 Vulnerability Summary:A critical vulnerability,