CVE-2014-8587

CVE-2014-8587 affects SAPCRYPTOLIB before 5.555.38, SAPSECULIB, and CommonCryptoLib before 8.4.30, used in SAP NetWeaver AS for ABAP and SAP HANA. The issue allows remote attackers to spoof Digital Signature Algorithm (DSA) signatures via unspecified vectors. Remediation: upgrade SAPCRYPTOLIB to ...

CVE-2016-4407

The CVE-2016-4407 issue concerns the SAP SAPCRYPTOLIB library, where the DSA algorithm implementation (version 5.555.38) fails to properly check signatures. This vulnerability allows remote authenticated users to impersonate arbitrary users via unspecified vectors, as described in SAP Security No...