description: SAF-T Framework Transaction SAFTN_G allows an attacker to exploit insufficient validation of path information provided by normal user, leading to full server directory access. The attacker can see the whole filesystem structure but cannot overwrite, delete, or corrupt arbitrary files on the server.
problem types: Path Traversal
affected:
{
product: SAF-T Framework
vendor: SAP SE
versions:
status: affected, version: < SAP_FIN 617
status: affected, version: < 618
status: affected, version: < 720
status: affected, version: < 730
status: affected, version: < SAP_APPL 600
status: affected, version: < 602
status: affected, version: < 603
status: affected, version: < 604
status: affected, version: < 605
status: affected, version: < 606
status: affected, version: < S4CORE 102
status: affected, version: < 103
status: affected, version: < 104
status: affected, version: < 105
}