Lucene search

MitreCVE-2010-2347

HistoryJun 21, 2010 - 7:30 p.m.

CVE-2010-2347

2010-06-2119:30:01

CWE-264

mitre

web.nvd.nist.gov

sap

j2ee

server core

telnet

smb relay

cve-2010-2347

nvd

CVSS2

4.9

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:P/A:N

AI Score

6.4

Confidence

Low

EPSS

0.003

Percentile

66.7%

JSON

The Telnet interface in the SAP J2EE Engine Core (SAP-JEECOR) 6.40 through 7.02, and Server Core (SERVERCORE) 7.10 through 7.30 allows remote authenticated users to bypass a security check and conduct SMB relay attacks via unspecified vectors.

Affected configurations

Nvd

Node

sapj2ee_engine_coreMatch6.40

sapj2ee_engine_coreMatch7.00

sapj2ee_engine_coreMatch7.01

sapj2ee_engine_coreMatch7.02

Node

sapserver_coreMatch7.10

sapserver_coreMatch7.11

sapserver_coreMatch7.20

sapserver_coreMatch7.30

VendorProductVersionCPE
sapj2ee_engine_core6.40cpe:2.3:a:sap:j2ee_engine_core:6.40:*:*:*:*:*:*:*
sapj2ee_engine_core7.00cpe:2.3:a:sap:j2ee_engine_core:7.00:*:*:*:*:*:*:*
sapj2ee_engine_core7.01cpe:2.3:a:sap:j2ee_engine_core:7.01:*:*:*:*:*:*:*
sapj2ee_engine_core7.02cpe:2.3:a:sap:j2ee_engine_core:7.02:*:*:*:*:*:*:*
sapserver_core7.10cpe:2.3:a:sap:server_core:7.10:*:*:*:*:*:*:*
sapserver_core7.11cpe:2.3:a:sap:server_core:7.11:*:*:*:*:*:*:*
sapserver_core7.20cpe:2.3:a:sap:server_core:7.20:*:*:*:*:*:*:*
sapserver_core7.30cpe:2.3:a:sap:server_core:7.30:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
sap	j2ee_engine_core	6.40	cpe:2.3:a:sap:j2ee_engine_core:6.40:::::::*
sap	j2ee_engine_core	7.00	cpe:2.3:a:sap:j2ee_engine_core:7.00:::::::*
sap	j2ee_engine_core	7.01	cpe:2.3:a:sap:j2ee_engine_core:7.01:::::::*
sap	j2ee_engine_core	7.02	cpe:2.3:a:sap:j2ee_engine_core:7.02:::::::*
sap	server_core	7.10	cpe:2.3:a:sap:server_core:7.10:::::::*
sap	server_core	7.11	cpe:2.3:a:sap:server_core:7.11:::::::*
sap	server_core	7.20	cpe:2.3:a:sap:server_core:7.20:::::::*
sap	server_core	7.30	cpe:2.3:a:sap:server_core:7.30:::::::*

References

archives.neohapsis.com/archives/fulldisclosure/2010-06/0371.html

secunia.com/advisories/40223

www.onapsis.com/resources/get.php?resid=adv_onapsis-2010-005

www.securityfocus.com/archive/1/511855/100/0/threaded

www.securityfocus.com/bid/40916

www.securitytracker.com/id?1024114

exchange.xforce.ibmcloud.com/vulnerabilities/59502

service.sap.com/sap/support/notes/1425847

CVSS2

4.9

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:P/A:N

AI Score

6.4

Confidence

Low

EPSS

0.003

Percentile

66.7%

JSON

Related for CVE-2010-2347