PT-2023-1712 · Sap · Sap Netweaver As Abap

CVE-2023-27500

·

Publicado

2023-03-02

·

Atualizado

2025-09-09

CVSS v3.1

9.6

Crítica

VetorAV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions SAP NetWeaver AS ABAP and SAP NetWeaver ABAP (affected versions not specified)
Description The issue is related to a directory traversal flaw in the SAPRSBRO program, which can be exploited by an attacker with non-administrative authorizations to over-write system files. This attack does not allow data to be read, but it can potentially make the system unavailable by over-writing critical OS files. The flaw is due to incorrect restriction of the directory path name with limited access.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2023-01290
CVE-2023-27500

Produtos afetados

Sap Netweaver As Abap