Lucene search

MitreCVE-2015-3978

HistoryMay 12, 2015 - 8:59 p.m.

CVE-2015-3978

2015-05-1220:59:00

CWE-200

mitre

web.nvd.nist.gov

cve-2015-3978

sap sybase

unwired platform

online data proxy

datavault

sap security note 2094830

nvd

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.4

Confidence

Low

EPSS

Percentile

5.1%

JSON

SAP Sybase Unwired Platform Online Data Proxy allows local users to obtain usernames and passwords via the DataVault, aka SAP Security Note 2094830.

Affected configurations

Nvd

Node

sapsybase_unwired_platform_online_data_proxy

VendorProductVersionCPE
sapsybase_unwired_platform_online_data_proxy*cpe:2.3:a:sap:sybase_unwired_platform_online_data_proxy:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
sap	sybase_unwired_platform_online_data_proxy	*	cpe:2.3:a:sap:sybase_unwired_platform_online_data_proxy::::::::

References

www.onapsis.com/blog/analyzing-sap-security-notes-april-2015-edition/

www.securityfocus.com/bid/74625

www.securitytracker.com/id/1032310

erpscan.io/press-center/blog/sap-security-notes-april-2015/

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.4

Confidence

Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2015-3978