PT-2016-5771 · Sap · Sap Console

Nahuel D. Sánchez · Publicado 2016-10-13 · Atualizado 2016-11-28 · CVE-2016-3946

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SAP Console (aka SAPConsole) version 7.30

Description The issue allows local users to discover SAP Server login credentials by reading the Windows registry.

Recommendations For SAP Console (aka SAPConsole) version 7.30, update to a version that addresses this issue, as the current version allows unauthorized access to sensitive information.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

CWE-255

Identificadores relacionados

CVE-2016-3946

Produtos afetados

Sap Console

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2016-3946 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-3946 · Aviso do Fabricante
• http://seclists.org/fulldisclosure/2016/Oct/31 · Nota
• http://securityfocus.com/bid/93509 · Nota
• https://onapsis.com/research/security-advisories/sap-console-insecure-password-storage · Nota