PT-2021-8391 · Sap · Sap Mobile Platform 3.0 Sp05 Clienthub

Published 2021-08-09 · Updated 2021-08-17 · CVE-2015-7731

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions SAP Mobile Platform 3.0 SP05 ClientHub

Description The issue allows attackers to obtain the keystream and other sensitive information via the DataVault.

Recommendations For SAP Mobile Platform 3.0 SP05 ClientHub, consider applying the fix mentioned in SAP Security Note 2094830 to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2015-7731

Affected Products

Sap Mobile Platform 3.0 Sp05 Clienthub

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2015-7731 · Security Note
• https://t.me/cvenotify/18950 · Telegram Post
• https://onapsis.com/research/security-advisories/SAP-Mobile-Platform-DataVault-Keystream-Recovery · Note
• https://seclists.org/bugtraq/2015/Aug/39 · Note