Lucene search
PRIOn knowledge basePRION:CVE-2023-29186HistoryApr 11, 2023 - 4:16 a.m.
Directory traversal
2023-04-1104:16:00
PRIOn knowledge base
www.prio-n.com
1
sap
netweaver
bi cont addon
directory traversal
vulnerability
report
upload
overwrite
files
server
remote attacker
administrative privileges
os files
system unavailable
In SAP NetWeaver (BI CONT ADDON) - versions 707, 737, 747, 757, an attacker can exploit a directory traversal flaw in a report to upload and overwrite files on the SAP server. Data cannot be read but if a remote attacker has sufficient (administrative) privileges then potentially critical OS files can be overwritten making the system unavailable.
Related
nvd
nvd
CVE-2023-29186
2023-04-11 04:16:08
cve
cve
CVE-2023-29186
2023-04-11 04:16:08
cvelist
cvelist
CVE-2023-29186 Directory/Path Traversal vulnerability in SAP NetWeaver.
2023-04-11 03:08:49
cnvd
cnvd
SAP NetWeaver Directory Traversal Vulnerability
2023-04-17 00:00:00