Skip to content
CVE PROGRAM SOURCE RECORD9.6 Critical

CVE-2023-27500

Directory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform

Description

An attacker with non-administrative authorizations can exploit a directory traversal flaw in program SAPRSBRO to over-write system files. In this attack, no data can be read but potentially critical OS files can be over-written making the system unavailable.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP NetWeaver AS for ABAP and ABAP Platform (SAPRSBRO Program)

Default version status: unaffected

  • 700affected
  • 701affected
  • 702affected
  • 731affected
  • 740affected
  • 750affected
  • 751affected
  • 752affected
  • 753affected
  • 754affected
  • 755affected
  • 756affected
  • 757affected

References