Description (CNA)
SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, allows an attacker with non-administrative authorizations to exploit a directory traversal flaw in an available service to overwrite the system files. In this attack, no data can be read but potentially critical OS files can be overwritten making the system unavailable.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP / NetWeaver Application Server for ABAP and ABAP Platform | affected 700; affected 701; affected 702; affected 731; affected 740; affected 750; affected 751; affected 752; affected 753; affected 754; affected 755; affected 756; affected 757; affected 791 |
CWE
CWE-22
References
- https://launchpad.support.sap.com/#/notes/3294595
- https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.