Directory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform

CVE-2023-27269

What is CVE-2023-27269?

The vulnerability found in SAP NetWeaver Application Server for ABAP allows attackers with non-administrative privileges to exploit a directory traversal issue within an exposed service. This exploit enables the unauthorized overwriting of system files, potentially leading to a disruption of service on the overall system. While the attack does not allow data exfiltration, the risk of overwriting essential OS files poses a significant threat, as it can render critical services inoperable and compromise system availability.

References