CVE-2016-6138 Directory traversal vulnerability in SAP TREX 7.10 Revision 63 allows remote attackers to read arbitrary files via unspecified vectors, aka SAP Security Note 2203591.
CriticalCVSS 9.8
EPSS 5.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in SAP TREX 7.10 Revision 63 allows remote attackers to read arbitrary files via unspecified vectors, aka SAP Security Note 2203591.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sap trex | = 7.10-revision_63 | No fix listed |
References
- packetstormsecurity.com
- scn.sap.com vendor-advisory
- 20160823 Re: Onapsis Security Advisory ONAPSIS-2016-020: SAP TREX Remote Directory Traversal mailing-list
- 20160819 Onapsis Security Advisory ONAPSIS-2016-020: SAP TREX Remote Directory Traversal mailing-list
- 92060 third-party-advisory vdb-entry
- layersevensecurity.com technical-description
- www.onapsis.com
- www.onapsis.com permissions-required