CVE-2016-6139 SAP TREX 7.10 Revision 63 allows remote attackers to read arbitrary files via unspecified vectors, aka SAP Security Note 2203591.
CriticalCVSS 9.8
EPSS 4.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SAP TREX 7.10 Revision 63 allows remote attackers to read arbitrary files via unspecified vectors, aka SAP Security Note 2203591.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sap trex | = 7.10-revision_63 | No fix listed |
References
- packetstormsecurity.com
- 20160823 Re: Onapsis Security Advisory ONAPSIS-2016-021: SAP TREX Remote file read mailing-list
- 20160819 Onapsis Security Advisory ONAPSIS-2016-021: SAP TREX Remote file read mailing-list
- 92063 third-party-advisory vdb-entry
- www.onapsis.com third-party-advisory
- www.onapsis.com permissions-required