IS-H Directory Traversal Vulnerability in IS-H, SAP security note 1526102

SAP security note 1526102, “IS-H: Directory Traversal Vulnerability in IS-H”, released on 14.12.2010. Below are the symptom, SAP recommended solution and the affected software components.

Description

Symptom

A malicious user can exploit the vulnerability to read or write arbitrary files on the remote server.

Solution

• Implement Support Package 04 for EHP5. Ensure that you apply Support Package 04 as a prerequisite for this note.
• Refer to SAP Note 1497003. The corrections from this note are required before implementing the current note.

Reason and prerequisites

Reports in IS-H fail to correctly validate the path where a user-submitted file is written. This flaw allows an attacker to potentially overwrite data on the remote system.

Implementing this note may cause side effects as documented in SAP Note 1577000, which addresses problems after implementing Note 1526102.

References

• SAP Note 1637243: Further correction instructions for lower patches
• SAP Note 1497003: Potential directory traversals in applications

Affected components

• IS-H: 463B, 472, 600, 602, 603, 604, 605