PT-2017-12027
CVE-2017-11459
·
تاريخ النشر
2017-07-25
·
تاريخ التحديث
2018-12-10
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
SAP TREX version 7.10
Description
The issue allows remote attackers to read arbitrary files via an
fget command or write to arbitrary files and consequently execute arbitrary code via an fdir command.Recommendations
For SAP TREX version 7.10, apply the fix as described in SAP Security Note 2419592 to prevent remote attackers from reading or writing arbitrary files.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾