CVE-2016-6139
CriticalSummary
SAP TREX version 7.10 Revision 63 allows remote attackers to read arbitrary files via unspecified vectors, posing a serious security risk.
Risk Assessment
Attackers may gain access to sensitive data, potentially leading to breaches of information confidentiality within the organization.
Recommendation
It is recommended to upgrade to the latest version of SAP TREX and monitor systems for unauthorized access.
Other vulnerabilities in SAP TREX 7.10 Revision 63
See all- CVE-2016-6137Critical
An unspecified function in SAP TREX 7.10 Revision 63 allows remote attackers to execute arbitrary OS commands via unknown vectors.
- CVE-2016-6147Critical
An unspecified interface in SAP TREX 7.10 Revision 63 allows remote attackers to execute arbitrary OS commands with SIDadm privileges via unspecified vectors.
- CVE-2016-6140Critical
SAP TREX version 7.10 Revision 63 allows remote attackers to write to arbitrary files via vectors related to RFC-Gateway, posing a serious security threat.
- CVE-2016-6138Critical
Directory traversal vulnerability in SAP TREX 7.10 Revision 63 allows remote attackers to read arbitrary files via unspecified vectors.
Original NVD description (English source)
SAP TREX 7.10 Revision 63 allows remote attackers to read arbitrary files via unspecified vectors, aka SAP Security Note 2203591.