EUVD-2014-3939

Malware in sbrugna...

[Onapsis Security Advisories] Multiple Hard-coded Usernames in SAP Components

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Onapsis Security Advisories:Multiple Hard-coded Usernames CWE-798 have been found and patched in a variety of SAP components. Summaries of the advisories with links to full versions follow: 1. ONAPSIS-2014-011-SAP Project System Structures and...

CVE-2014-4007

The SAP Upgrade tools for ABAP has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors...

PT-2014-5669

Name of the Vulnerable Software and Affected Versions SAP Upgrade tools for ABAP affected versions not specified Description The issue concerns hardcoded credentials in the SAP Upgrade tools for ABAP, making it easier for remote attackers to gain access through unspecified vectors. Recommendation...

CVE-2014-4007: Undefined Security Weakness

The SAP Upgrade tools for ABAP has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors...