CVEvulnerability

CVE-2021-44232

7.7 HIGH Published 2021-12-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-12-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.7 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
Weaknesses
CWE-22

Description

SAF-T Framework Transaction SAFTN_G allows an attacker to exploit insufficient validation of path information provided by normal user, leading to full server directory access. The attacker can see the whole filesystem structure but cannot overwrite, delete, or corrupt arbitrary files on the server.

Affected configurations

• sap saf-t framework 103 • sap saf-t framework 104 • sap saf-t framework 105 • sap saf-t framework 602 • sap saf-t framework 603 • sap saf-t framework 604 • sap saf-t framework 605 • sap saf-t framework 606 • sap saf-t framework 618 • sap saf-t framework 720 • sap saf-t framework 730 • sap saf-t framework s4core 102 • sap saf-t framework sap appl 600 • sap saf-t framework sap fin 617

Related

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References