CVEvulnerability
CVE-2003-0747
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2003-10-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Description
wgate.dll in SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to obtain potentially sensitive information such as directory structure and operating system via incorrect parameters (1) ~service, (2) ~templatelanguage, (3) ~language, (4) ~theme, or (5) ~template, which leaks the information in the resulting error message.
Affected configurations
• sap internet transaction server 4620.2.0.323011
References
- http://archives.neohapsis.com/archives/bugtraq/2003-08/0361.html Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/8515 Exploit, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13063 exchange.xforce.ibmcloud.com
- http://archives.neohapsis.com/archives/bugtraq/2003-08/0361.html Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/8515 Exploit, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13063 exchange.xforce.ibmcloud.com