CVE-2016-10005

Опубликовано: 19 дек. 2016

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

Webdynpro in SAP Solman 7.1 through 7.31 allows remote attackers to obtain sensitive information via webdynpro/dispatcher/sap.com/cafeugp~~example~~timeoff~wd requests, aka SAP Security Note 2344524.

Ссылки

http://packetstormsecurity.com/files/140232/SAP-Solman-7.31-Information-Disclosure.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2016/Dec/69
http://www.securityfocus.com/bid/92949
Third Party Advisory
VDB Entry
https://erpscan.io/advisories/erpscan-16-035-sap-solman-user-accounts-dislosure/
http://packetstormsecurity.com/files/140232/SAP-Solman-7.31-Information-Disclosure.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2016/Dec/69
http://www.securityfocus.com/bid/92949
Third Party Advisory
VDB Entry
https://erpscan.io/advisories/erpscan-16-035-sap-solman-user-accounts-dislosure/

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:sap:solution_manager:7.1:*:*:*:*:*:*:*

cpe:2.3:a:sap:solution_manager:7.1:sp10:*:*:*:*:*:*

cpe:2.3:a:sap:solution_manager:7.1:sp12:*:*:*:*:*:*

cpe:2.3:a:sap:solution_manager:7.1:sp14:*:*:*:*:*:*

cpe:2.3:a:sap:solution_manager:7.1:sp5:*:*:*:*:*:*

cpe:2.3:a:sap:solution_manager:7.20:*:*:*:*:*:*:*

cpe:2.3:a:sap:solution_manager:7.20:sp01:*:*:*:*:*:*

cpe:2.3:a:sap:solution_manager:7.20:sp03:*:*:*:*:*:*

cpe:2.3:a:sap:solution_manager:7.31:*:*:*:*:*:*:*

EPSS

Процентиль: 76%

0.00993

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-vpq2-pmx3-pq7h