PT-2014-4902 · Sap · Sap Erp 6.0

Published 2014-04-10 · Updated 2017-08-29 · CVE-2014-2748

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SAP Enhancement Package (EHP) 6 for SAP ERP 6.0

Description The Security Audit Log facility in the affected software allows remote attackers to modify or delete arbitrary log classes. The exact vectors used for this issue are not specified.

Recommendations For SAP Enhancement Package (EHP) 6 for SAP ERP 6.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2014-2748

Affected Products

Sap Erp 6.0

References · 6

• http://secunia.com/advisories/57741 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-2748 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/92334 · Note
• http://onapsis.com/research-advisories.php · Note
• https://service.sap.com/sap/support/notes/1926485 · Note
• http://onapsis.com/get.php?resid=adv_onapsis-2014-002 · Note