Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-44232

SAF-T Framework Transaction SAFTN_G allows an attacker to exploit insufficient validation of path information provided by normal user, leading to full server directory access. The

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

SAF-T Framework Transaction SAFTN_G allows an attacker to exploit insufficient validation of path information provided by normal user, leading to full server directory access. The attacker can see the whole filesystem structure but cannot overwrite, delete, or corrupt arbitrary files on the server.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP SE SAF-T Framework

  • < SAP_FIN 617affected
  • < 618affected
  • < 720affected
  • < 730affected
  • < SAP_APPL 600affected
  • < 602affected
  • < 603affected
  • < 604affected
  • < 605affected
  • < 606affected
  • < S4CORE 102affected
  • < 103affected
  • < 104affected
  • < 105affected

References