CVE-2021-44232

State
Published
Severity
Not scored
Published
Dec 14, 2021
Updated
Aug 4, 2024
Reserved
Nov 26, 2021

Read the record on cve.org

Description

SAF-T Framework Transaction SAFTN_G allows an attacker to exploit insufficient validation of path information provided by normal user, leading to full server directory access. The attacker can see the whole filesystem structure but cannot overwrite, delete, or corrupt arbitrary files on the server.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
SAF-T FrameworkSAP SE
  • < SAP_FIN 617Affected
  • < 618Affected
  • < 720Affected
  • < 730Affected
  • < SAP_APPL 600Affected
  • < 602Affected
  • < 603Affected
  • < 604Affected
  • < 605Affected
  • < 606Affected
  • < S4CORE 102Affected
  • < 103Affected
  • < 104Affected
  • < 105Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.