PT-2017-14523 · Sap · Sap Business Intelligence Promotion Management Application

Publicado 2017-12-12 · Atualizado 2017-12-22 · CVE-2017-16684

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SAP Business Intelligence Promotion Management Application versions 4.10 through 4.30

Description The issue concerns the lack of authentication checks for certain functionalities that require user identity.

Recommendations For versions 4.10 through 4.30, consider implementing additional authentication checks for functionalities that require user identity as a temporary workaround until a patch is available.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2017-16684

Produtos afetados

Sap Business Intelligence Promotion Management Application

Referências · 5

• https://blogs.sap.com/2017/12/12/sap-security-patch-day-december-2017 · Aviso do Fabricante
• https://launchpad.support.sap.com/#/notes/2537152 · Nota
• https://osv.dev/vulnerability/CVE-2017-16684 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-16684 · Nota de Segurança
• http://securityfocus.com/bid/102147 · Nota