medium5.0
CVE-2014-1960
The Solution Manager in SAP NetWeaver does not properly restrict access, which allows remote attackers to obtain sensitive information via unspecified vectors.
Impact
The Solution Manager in SAP NetWeaver does not properly restrict access, which allows remote attackers to obtain sensitive information via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sap | Netweaver | All versions |
| Sap | Netweaver Solution Manager | Versions 7.0, 7.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://scn.sap.com/docs/DOC-8218
- http://secunia.com/advisories/56942
- https://erpscan.io/advisories/erpscan-14-004-sap-netweaver-solution-manager-missing-authorization-check-information-disclosure/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/91093
- https://service.sap.com/sap/support/notes/1828885
- http://scn.sap.com/docs/DOC-8218
- http://secunia.com/advisories/56942
- https://erpscan.io/advisories/erpscan-14-004-sap-netweaver-solution-manager-missing-authorization-check-information-disclosure/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/91093
- https://service.sap.com/sap/support/notes/1828885