Description
SAP Asset Accounting could allow a high privileged attacker to exploit insufficient validation of path information provided by the users and pass it through to the file API's. Thus, causing a considerable impact on confidentiality, integrity and availability of the application.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP_SE | SAP Asset Accounting | SAP_APPL 600, SAP_APPL 602, SAP_APPL 603, SAP_APPL 604, SAP_APPL 605, SAP_APPL 606, SAP_FIN617, SAP_FIN 618, SAP_FIN700 | — |
Advisories 1
- WID-SEC-2024-0811 SAP Patch Day April 2024: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 8, 2024