← CVE Intelligence

CVE-2023-27500

Directory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform PUBLISHED

Description (CNA)

An attacker with non-administrative authorizations can exploit a directory traversal flaw in program SAPRSBRO to over-write system files. In this attack, no data can be read but potentially critical OS files can be over-written making the system unavailable.

Affected (CNA)

Vendor / productVersions
SAP / NetWeaver AS for ABAP and ABAP Platform (SAPRSBRO Program)affected 700; affected 701; affected 702; affected 731; affected 740; affected 750; affected 751; affected 752; affected 753; affected 754; affected 755; affected 756; affected 757

CWE

CWE-22

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.