PT-2014-4902 · Sap · Sap Erp 6.0

Publicado 2014-04-10 · Atualizado 2017-08-29 · CVE-2014-2748

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SAP Enhancement Package (EHP) 6 for SAP ERP 6.0

Description The Security Audit Log facility in the affected software allows remote attackers to modify or delete arbitrary log classes. The exact vectors used for this issue are not specified.

Recommendations For SAP Enhancement Package (EHP) 6 for SAP ERP 6.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2014-2748

Produtos afetados

Sap Erp 6.0

Referências · 6

• https://exchange.xforce.ibmcloud.com/vulnerabilities/92334 · Nota
• http://secunia.com/advisories/57741 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2014-2748 · Nota de Segurança
• http://onapsis.com/research-advisories.php · Nota
• https://service.sap.com/sap/support/notes/1926485 · Nota
• http://onapsis.com/get.php?resid=adv_onapsis-2014-002 · Nota