Lucene search

[email protected]CVE-2003-1038

HistoryApr 15, 2004 - 4:00 a.m.

CVE-2003-1038

2004-04-1504:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

agate

sap

information security

remote attack

nvd

cve-2003-1038

7 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.006 Low

EPSS

Percentile

77.9%

JSON

The AGate component for SAP Internet Transaction Server (ITS) allows remote attackers to obtain sensitive information via a ~command parameter with an AgateInstallCheck value, which provides a list of installed DLLs and full pathnames.

CPENameOperatorVersion
sap:internet_transaction_serversap internet transaction serverle6.20_pl7
sap:internet_transaction_serversap internet transaction serverle4.6_pl463
sap:internet_transaction_serversap internet transaction serverle6.10_pl30

CPE	Name	Operator	Version
sap:internet_transaction_server	sap internet transaction server	le	6.20_pl7
sap:internet_transaction_server	sap internet transaction server	le	4.6_pl463
sap:internet_transaction_server	sap internet transaction server	le	6.10_pl30

References

www.phenoelit.de/stuff/Phenoelit20c3.pd

exchange.xforce.ibmcloud.com/vulnerabilities/15516

7 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.006 Low

EPSS

Percentile

77.9%

JSON

Related for CVE-2003-1038

cvelist1