Description
SAP Asset Accounting could allow a high privileged attacker to exploit insufficient validation of path information provided by the users and pass it through to the file API's. Thus, causing a considerable impact on confidentiality, integrity and availability of the application.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
SAP_SE SAP Asset Accounting
Default version status: unaffected
SAP_APPL 600affectedSAP_APPL 602affectedSAP_APPL 603affectedSAP_APPL 604affectedSAP_APPL 605affectedSAP_APPL 606affectedSAP_FIN617affectedSAP_FIN 618affectedSAP_FIN700affected