PT-2016-6765 · Sap · Sap Trex

Juan Pablo Perez Etchegoyen + 1 · Publicado 2016-08-05 · Atualizado 2016-11-28 · CVE-2016-6138

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SAP TREX version 7.10 Revision 63

Description A directory traversal issue allows remote attackers to read arbitrary files.

Recommendations For SAP TREX version 7.10 Revision 63, apply the fix as described in SAP Security Note 2203591 to resolve the issue.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2016-6138

Produtos afetados

Sap Trex

Referências · 10

• http://seclists.org/fulldisclosure/2016/Aug/114 · Nota
• https://layersevensecurity.com/wp-content/uploads/2015/11/Layer-Seven-Security_SAP-Security-Notes_October-2015.pdf · Nota
• http://securityfocus.com/bid/92060 · Nota
• http://scn.sap.com/community/security/blog/2015/10/14/sap-security-notes-october-2015--review · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-6138 · Aviso do Fabricante
• https://onapsis.com/research/security-advisories/sap-trex-remote-directory-traversal · Nota
• http://packetstormsecurity.com/files/138437/SAP-TREX-7.10-Revision-63-Directory-Traversal.html · Nota
• http://seclists.org/fulldisclosure/2016/Aug/86 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-6138 · Nota de Segurança
• https://onapsis.com/blog/analyzing-sap-security-notes-october-2015 · Nota