Directory/Path Traversal vulnerability in SAP NetWeaver.

A flaw in SAP NetWeaver allows attackers with administrative access to bypass file upload restrictions and overwrite critical files on the server, potentially crashing the system. While attackers cannot read files through this vulnerability, they can damage or destroy important system files.

A directory traversal vulnerability in SAP NetWeaver BI CONT ADDON (versions 707, 737, 747, 757) permits authenticated attackers with elevated privileges to upload and overwrite arbitrary files via a report interface, bypassing path validation controls. The attack vector requires administrative credentials and can result in denial of service by corrupting critical OS files; confidentiality is not impacted as file read access is not possible.