Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1787460-2)
SAP Support Packages
(SAPK-60312INEADFPS, SAPK-60413INEADFPS, SAPK-60510INEADFPS, SAPK-60606INEADFPS, SAPK-61601INEADFPS, SAPKGPDB23, SAPKGPDC28, SAPKGPDD23)
Описание
Read-only directory traversal: IS-DFS-OF-MPO fails to correctly validate the path that is used to reference a file that is read from the remote server. As a result, an attacker can potentially direct the program to an arbitrary other file in the system, disclosing its contents.
Как исправить
Implement these correction instructions.
Ссылки