Lucene search
MitreCVE-2014-3131HistoryApr 30, 2014 - 2:22 p.m.
CVE-2014-3131
2014-04-3014:22:07
CWE-264
mitre
web.nvd.nist.gov
22
sap
solution manager
7.1
cve-2014-3131
profile maintenance
access restriction
remote authentication
sensitive information
CVSS2
4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
AI Score
6
Confidence
Low
EPSS
0.002
Percentile
56.3%
SAP Profile Maintenance does not properly restrict access, which allows remote authenticated users to obtain sensitive information via an unspecified RFC function, related to SAP Solution Manager 7.1.
Affected configurations
Node
sapprofile_maintenanceMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| sap | profile_maintenance | - | cpe:2.3:a:sap:profile_maintenance:-:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2014-3131
2014-04-30 14:00:00
nvd
nvd
CVE-2014-3131
2014-04-30 14:22:07
prion
prion
Code injection
2014-04-30 14:22:00
CVSS2
4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
AI Score
6
Confidence
Low
EPSS
0.002
Percentile
56.3%
Related for CVE-2014-3131