Skip links
Arpine Maghakyan

Arpine Maghakyan

Security Researcher of RedRays.

Potential directory traversals in transaction TVDT, SAP security note 1509403

Description

Potential directory traversals in transactions TVDT using physical file names as input.

Available fix and Supported packages

  • SAP_APPL | 46C | 46C
  • SAP_APPL | 470 | 470
  • SAP_APPL | 500 | 500
  • SAP_APPL | 600 | 600
  • SAP_APPL | 602 | 602
  • SAP_APPL | 603 | 603
  • SAP_APPL | 604 | 604
  • SAP_APPL | 605 | 605
  • EA-FINSERV | 110 | 110
  • EA-FINSERV | 200 | 200
  • EA-FINSERV | 500 | 500
  • EA-FINSERV | 600 | 600
  • EA-FINSERV | 603 | 603
  • EA-FINSERV | 604 | 604
  • EA-FINSERV | 605 | 605
  • BANK/CFM | 463_20 | 463_20
  • SAP_APPL 600 | SAPKH60019 |
  • SAP_APPL 602 | SAPKH60209 |
  • SAP_APPL 603 | SAPKH60308 |
  • SAP_APPL 604 | SAPKH60409 |
  • SAP_APPL 46C | SAPKH46C62 |
  • SAP_APPL 470 | SAPKH47036 |
  • SAP_APPL 605 | SAPKH60504 |
  • SAP_APPL 500 | SAPKH50025 |
  • EA-FINSERV 500 | SAPKGPFC24 |
  • EA-FINSERV 600 | SAPKGPFD19 |
  • EA-FINSERV 603 | SAPK-60308INEAFINSRV |
  • EA-FINSERV 604 | SAPK-60409INEAFINSRV |
  • EA-FINSERV 605 | SAPK-60503INEAFINSRV |
  • EA-FINSERV 110 | SAPKGPFA32 |
  • EA-FINSERV 200 | SAPKGPFB21 |
  • EA-FINSERV 605 | SAPK-60504INEAFINSRV |
  • EA-FINSERV 500 | SAPKGPFC25 |
  • BANK/CFM 463_20 | SAPKIPBJ40 |

Affected component

    FIN-FSCM-TRM-MR
    Market Risk Analyzer

CVSS

Score: 0

Exploit

Exploit is not available.
For detailed information please contact the mail [email protected]

URL

https://launchpad.support.sap.com/#/notes/1509403

TAGS

#Directory-traversal
#FILE_VALIDATE_NAME
#FILE
#VALIDATION_FAILED
#TVDT

More to explorer