In SAP NetWeaver (BI CONT ADDON) - versions 707, 737, 747, 757, an attacker can exploit a directory traversal flaw in a report to upload and overwrite files on the SAP server. Data cannot be read but if a remote attacker has sufficient (administrative) privileges then potentially critical OS files can be overwritten making the system unavailable.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: sap
Published: 2023-04-11T03:08:49.584Z
Updated: 2024-08-02T14:00:15.983Z
Reserved: 2023-04-03T09:22:43.157Z
Link: CVE-2023-29186
Vulnrichment
No data.
NVD
Status : Modified
Published: 2023-04-11T04:16:08.610
Modified: 2024-11-21T07:56:40.720
Link: CVE-2023-29186
Redhat
No data.