Skip links
Arpine Maghakyan

Arpine Maghakyan

Security Researcher of RedRays.

Directory traversal in report fr importing confirmation file, SAP security note 1527437

Description

Due to an error in the report for importing the confirmation file, any files can be read using the network.

Available fix and Supported packages

  • FSAPPL | 100 | 100
  • FSAPPL | 200 | 200
  • FSAPPL | 300 | 300
  • BANK-TRBK | 30 | 30
  • BANK-TRBK | 40 | 40
  • FSAPPL 200 | SAPKISC314 |
  • FSAPPL 100 | SAPKISC215 |
  • FSAPPL 300 | SAPK-30007INFSAPPL |
  • BANK-TRBK 30 | SAPKISCC12 |
  • BANK-TRBK 40 | SAPKISC109 |

Affected component

    FS-AM-CM-CA
    Card

CVSS

Score: 0

Exploit

Exploit is not available.
For detailed information please contact the mail [email protected]

URL

https://launchpad.support.sap.com/#/notes/1527437

TAGS

#Directory
#traversal
#confirmation-file

More to explorer