CVE-2022-27657

Mô tả

Tham khảo

• packetstormsecurity.com/files/167563/SAP-FRUN-Simple-Diagnostics-Agent-1.0-Directory-Traversal.html · Third Party Advisory
• seclists.org/fulldisclosure/2022/Jun/41 · Mailing List
• launchpad.support.sap.com · Permissions Required
• sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html · Vendor Advisory

Lỗ hổng khác của focused run

• CVE-2022-24399TRUNG BÌNH 6.1The SAP Focused Run (Real User Monitoring) - versions 200, 300, REST service does not sufficiently sanitize the input name of the file using…
• CVE-2021-27609TRUNG BÌNH 6.5SAP Focused RUN versions 200, 300, does not perform necessary authorization checks for an authenticated user, which allows a user to call th…
• CVE-2020-6369TRUNG BÌNH 5.9SAP Solution Manager and SAP Focused Run (update provided in WILY_INTRO_ENTERPRISE 9.7, 10.1, 10.5, 10.7), allows an unauthenticated attacke…