The vulnerability of the Log Viewer component of the SAP NetWeaver software integration platform allows a hacker to bypass the catalog and execute arbitrary code in the context of the server.

The vulnerability of the Log Viewer component in the SAP NetWeaver software integration platform exists due to an incorrect restriction on the path name to the restricted access directory. The web application recognizes “.” and “/” as part of a valid file path. Exploiting this vulnerability allow...