Path traversal

2020-07-1413:15:00

PRIOn knowledge base

www.prio-n.com

5.2 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

67.9%

JSON

The insufficient input path validation of certain parameter in the web service of SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, allows an unauthenticated attacker to exploit a method to download zip files to a specific directory, leading to Path Traversal.

CPENameOperatorVersion
netweaver_application_server_javaeq7.30
netweaver_application_server_javaeq7.31
netweaver_application_server_javaeq7.40
netweaver_application_server_javaeq7.50

Name	Operator	Version
netweaver_application_server_java	eq	7.30
netweaver_application_server_java	eq	7.31
netweaver_application_server_java	eq	7.40
netweaver_application_server_java	eq	7.50