PT-2014-8461 · Sap · Sap Netweaver As Abap
CVE-2014-8312
·
Publicado
2014-10-16
·
Atualizado
2022-10-06
CVSS v2.0
3.5
Baixa
| Vetor | AV:N/AC:M/Au:S/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
SAP Netweaver AS ABAP version 7.31
Description
The issue allows remote authenticated users to obtain sensitive information by making a request to the RSDU CCMS GET PROFILE PARAM RFC function.
Recommendations
For SAP Netweaver AS ABAP version 7.31, consider restricting access to the RSDU CCMS GET PROFILE PARAM RFC function until a patch is available.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Sap Netweaver As Abap