medium5.0
CVE-2003-1038
The AGate component for SAP Internet Transaction Server (ITS) allows remote attackers to obtain sensitive information via a ~command parameter with an AgateIns…
Impact
The AGate component for SAP Internet Transaction Server (ITS) allows remote attackers to obtain sensitive information via a ~command parameter with an AgateInstallCheck value, which provides a list of installed DLLs and full pathnames.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sap | Internet Transaction Server | through 4.6_pl463 through 6.10_pl30 through 6.20_pl7 |