Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
SAP Portal directory traversal vulnerability - Vulnerability Database

SAP Portal directory traversal vulnerability

Description

SAP Portal fails to correctly validate the path with which a file that is read from the remote server is referenced. Through this, an attacker can potentially point the program to an arbitrary other file on the system, disclosing its contents.

Remediation

Install SAP security note 1630293.

References

Breaking SAP portal

Related Vulnerabilities

ColdFusion directory traversal High
Common tags: Directory Traversal
WordPress Plugin WP AmASIN-The Amazon Affiliate Shop Directory Traversal (0.9.6) High
Common tags: Directory Traversal
WordPress Plugin WordPress Download Manager Directory Traversal (2.6.95) High
Common tags: Directory Traversal
WordPress Plugin NextGEN Gallery-WordPress Gallery Directory Traversal (2.0.0) High
Common tags: Directory Traversal
WordPress Plugin Advanced Dewplayer Directory Traversal (1.2) High
Common tags: Directory Traversal

Severity

High

Classification

CWE-22
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Directory Traversal