CVE-2015-5067

Опубликовано: 24 июн. 2015

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

The (1) Cross-System Tools and (2) Data Transfer Workbench in SAP NetWeaver have hardcoded credentials, which allows remote attackers to obtain access via unspecified vectors, aka SAP Security Notes 2059659 and 2057982.

Ссылки

http://packetstormsecurity.com/files/133515/SAP-NetWeaver-AS-FKCDBFTRACE-ABAP-Hardcoded-Credentials.html
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/133516/SAP-NetWeaver-AS-LSCT1I13-ABAP-Hardcoded-Credentials.html
Third Party Advisory
VDB Entry
http://scn.sap.com/community/security/blog/2015/06/11/sap-security-notes-june-2015
Vendor Advisory
http://www.securityfocus.com/bid/75165
Third Party Advisory
VDB Entry
https://erpscan.io/advisories/erpscan-15-015-sap-netweaver-hardcoded-credentials/
https://erpscan.io/advisories/erpscan-15-016-sap-netweaver-hardcoded-credentials/
http://packetstormsecurity.com/files/133515/SAP-NetWeaver-AS-FKCDBFTRACE-ABAP-Hardcoded-Credentials.html
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/133516/SAP-NetWeaver-AS-LSCT1I13-ABAP-Hardcoded-Credentials.html
Third Party Advisory
VDB Entry
http://scn.sap.com/community/security/blog/2015/06/11/sap-security-notes-june-2015
Vendor Advisory
http://www.securityfocus.com/bid/75165
Third Party Advisory
VDB Entry
https://erpscan.io/advisories/erpscan-15-015-sap-netweaver-hardcoded-credentials/
https://erpscan.io/advisories/erpscan-15-016-sap-netweaver-hardcoded-credentials/

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:sap:netweaver:-:*:*:*:*:*:*:*

EPSS

Процентиль: 81%

0.01584

Низкий

7.5 High

CVSS2

Дефекты

CWE-255

Связанные уязвимости

GHSA-h2cf-jp47-pp29

github

больше 3 лет назад