A highly privileged remote attacker, can gain unauthorized access to display contents of restricted directories by exploiting insufficient validation of path information in SAP Focused Run (Simple Diagnostics Agent 1.0) - version 1.0.
References
Link | Resource |
---|---|
http://packetstormsecurity.com/files/167563/SAP-FRUN-Simple-Diagnostics-Agent-1.0-Directory-Traversal.html | Third Party Advisory VDB Entry |
http://seclists.org/fulldisclosure/2022/Jun/41 | Mailing List Third Party Advisory |
https://launchpad.support.sap.com/#/notes/3159091 | Permissions Required Vendor Advisory |
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html | Vendor Advisory |
Configurations
History
01 Feb 2023, 14:36
Type | Values Removed | Values Added |
---|---|---|
References | (MISC) http://packetstormsecurity.com/files/167563/SAP-FRUN-Simple-Diagnostics-Agent-1.0-Directory-Traversal.html - Third Party Advisory, VDB Entry | |
References | (FULLDISC) http://seclists.org/fulldisclosure/2022/Jun/41 - Mailing List, Third Party Advisory |
21 Jun 2022, 22:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
21 Jun 2022, 18:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
20 Apr 2022, 18:42
Type | Values Removed | Values Added |
---|---|---|
References | (MISC) https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - Vendor Advisory | |
References | (MISC) https://launchpad.support.sap.com/#/notes/3159091 - Permissions Required, Vendor Advisory | |
CPE | cpe:2.3:a:sap:focused_run:1.0:*:*:*:*:*:*:* | |
CWE | CWE-22 | |
First Time |
Sap
Sap focused Run |
|
CVSS |
v2 : v3 : |
v2 : 4.0
v3 : 2.7 |
12 Apr 2022, 17:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2022-04-12 17:15
Updated : 2023-12-10 14:22
NVD link : CVE-2022-27657
Mitre link : CVE-2022-27657
CVE.ORG link : CVE-2022-27657
JSON object : View
Products Affected
sap
- focused_run
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')