PT-2015-3845 · Sap · Sap Adaptive Server Enterprise

Publicado 2015-06-08 · Atualizado 2015-06-09 · CVE-2014-6284

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SAP Adaptive Server Enterprise (ASE) versions prior to 15.7 SP132 SAP Adaptive Server Enterprise (ASE) versions prior to 16.0 SP01

Description The issue allows remote attackers to bypass the challenge and response mechanism, obtaining access to the probe account via a crafted response.

Recommendations For versions prior to 15.7 SP132, update to 15.7 SP132 or later. For versions prior to 16.0 SP01, update to 16.0 SP01 or later.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2014-6284

Produtos afetados

Sap Adaptive Server Enterprise

Referências · 2

• 🔥 https://trustwave.com/Resources/Security-Advisories/Advisories/TWSL2015-004/?fid=6200 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-6284 · Nota de Segurança