PT-2004-1129 · Sap · Sap R/3

Published 2004-03-16 · Updated 2017-07-11 · CVE-2002-1577

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SAP R/3 versions 2.0B through 4.6D

Description The issue allows remote attackers to gain privileges due to default users and passwords installed with several clients. The affected accounts include SAP*, SAPCPIC, DDIC, EARLYWATCH, and TMSADM.

Recommendations For SAP R/3 versions 2.0B through 4.6D, change the default passwords of the SAP*, SAPCPIC, DDIC, EARLYWATCH, and TMSADM accounts to prevent unauthorized access.

Fix

Related Identifiers

CVE-2002-1577

Affected Products

Sap R/3

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2002-1577 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/9964 · Note
• http://marc.info/?l=bugtraq&m=103038238228119&w=2 · Note