Directory Traversal Vulnerability in SAP Focused Run by SAP
CVE-2022-27657

2.7LOW

Key Information:

Vendor
SAP
Status
SAP Focused Run (simple Diagnostics Agent)
Vendor
CVE Published:
12 April 2022

Summary

A directory traversal vulnerability exists in SAP Focused Run's Simple Diagnostics Agent 1.0, allowing a remote attacker with high privileges to exploit insufficient path validation. This exploitation enables unauthorized access to restricted directories, potentially exposing sensitive information. Timely updates and patch management are essential to mitigate this risk.

Affected Version(s)

SAP Focused Run (Simple Diagnostics Agent) 1.0

References

https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-...
x_refsource_MISC
https://launchpad.support.sap.com/#/notes/3159091
x_refsource_MISC
http://seclists.org/fulldisclosure/2022/Jun/41
mailing-listx_refsource_FULLDISC

CVSS V3.1

Score:
2.7
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.