PT-2010-3932 · Sap · Sap J2Ee Engine Core+1

Publicado 2010-06-21 · Atualizado 2018-10-10 · CVE-2010-2347

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:N/AC:M/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions SAP J2EE Engine Core versions 6.40 through 7.02 SAP Server Core versions 7.10 through 7.30

Description The issue allows remote authenticated users to bypass a security check and conduct SMB relay attacks.

Recommendations For SAP J2EE Engine Core versions 6.40 through 7.02, update to a version outside of this range to resolve the issue. For SAP Server Core versions 7.10 through 7.30, update to a version outside of this range to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2010-2347

Produtos afetados

Sap J2Ee Engine Core

Sap Server Core

Referências · 9

• http://onapsis.com/resources/get.php?resid=adv_onapsis-2010-005 · Nota
• http://securityfocus.com/bid/40916 · Nota
• http://securityfocus.com/archive/1/511855/100/0/threaded · Nota
• http://secunia.com/advisories/40223 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2010-2347 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/59502 · Nota
• https://service.sap.com/sap/support/notes/1425847 · Nota
• http://archives.neohapsis.com/archives/fulldisclosure/2010-06/0371.html · Nota
• http://securitytracker.com/id?1024114 · Nota