CVE-2016-6138
CriticalSummary
Directory traversal vulnerability in SAP TREX 7.10 Revision 63 allows remote attackers to read arbitrary files via unspecified vectors.
Risk Assessment
Attackers may gain access to sensitive data, potentially compromising the confidentiality of information within the organization.
Recommendation
It is recommended to update to the latest version of SAP TREX and monitor system access to detect potential attack attempts.
Other vulnerabilities in SAP TREX 7.10 Revision 63
See all- CVE-2016-6137Critical
An unspecified function in SAP TREX 7.10 Revision 63 allows remote attackers to execute arbitrary OS commands via unknown vectors.
- CVE-2016-6147Critical
An unspecified interface in SAP TREX 7.10 Revision 63 allows remote attackers to execute arbitrary OS commands with SIDadm privileges via unspecified vectors.
- CVE-2016-6140Critical
SAP TREX version 7.10 Revision 63 allows remote attackers to write to arbitrary files via vectors related to RFC-Gateway, posing a serious security threat.
- CVE-2016-6139Critical
SAP TREX version 7.10 Revision 63 allows remote attackers to read arbitrary files via unspecified vectors, posing a serious security risk.
Original NVD description (English source)
Directory traversal vulnerability in SAP TREX 7.10 Revision 63 allows remote attackers to read arbitrary files via unspecified vectors, aka SAP Security Note 2203591.