SAP Manufacturing Execution Path Traversal Vulnerability

SAP Manufacturing Execution is an integrated Manufacturing Execution System (MES) solution for discrete manufacturing processes from SAP, Germany. SAP Manufacturing Execution versions 15.1, 15.2, and 15.3 contain a path traversal vulnerability that stems from insufficient validation of the file path request parameter, which could be exploited by an attacker to read the contents of arbitrary directory files on a remote server.