Lucene search
HistoryJun 02, 2015 - 2:59 p.m.
CVE-2015-4161
sap afaria
cve-2015-4161
remote attackers
gain privileges
sensitive information
nvd
sap security note 2155690
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7 High
AI Score
Confidence
Low
0.011 Low
EPSS
Percentile
84.5%
SAP Afaria does not properly restrict access to unspecified functionality, which allows remote attackers to obtain sensitive information, gain privileges, or have other unspecified impact via unknown vectors, SAP Security Note 2155690.
Affected configurations
Node
sapafariaMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| sap:afaria | sap afaria | eq | - |
Related
cvelist
cvelist
CVE-2015-4161
2015-06-02 14:00:00
nvd
nvd
CVE-2015-4161
2015-06-02 14:59:21
prion
prion
Information disclosure
2015-06-02 14:59:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7 High
AI Score
Confidence
Low
0.011 Low
EPSS
Percentile
84.5%
Related for CVE-2015-4161