CVE-2021-44232

Published: Dec 14, 2021Modified: Nov 21, 2024

7.7

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Exploitability: 3.1 / Impact: 4.0

Source: NVD

Description

SAF-T Framework Transaction SAFTN_G allows an attacker to exploit insufficient validation of path information provided by normal user, leading to full server directory access. The attacker can see the whole filesystem structure but cannot overwrite, delete, or corrupt arbitrary files on the server.

Affected (14)

Products: Sap: Saf T Framework

Sap

1 product

Saf T Framework

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Sap Saf T Framework	Version 103
Sap Saf T Framework	Version 104
Sap Saf T Framework	Version 105
Sap Saf T Framework	Version 602
Sap Saf T Framework	Version 603
Sap Saf T Framework	Version 604
Sap Saf T Framework	Version 605
Sap Saf T Framework	Version 606
Sap Saf T Framework	Version 618
Sap Saf T Framework	Version 720
Sap Saf T Framework	Version 730
Sap Saf T Framework	Version s4core_102
Sap Saf T Framework	Version sap_appl_600
Sap Saf T Framework	Version sap_fin_617