CVEvulnerability
CVE-2014-3131
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-04-30
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
SAP Profile Maintenance does not properly restrict access, which allows remote authenticated users to obtain sensitive information via an unspecified RFC function, related to SAP Solution Manager 7.1.
Affected configurations
• sap profile maintenance
Related
Weakness · not in database (1)
References
- http://scn.sap.com/docs/DOC-8218 scn.sap.com
- http://seclists.org/fulldisclosure/2014/Apr/300 seclists.org
- http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-007 www.onapsis.com
- http://www.securityfocus.com/bid/67103 www.securityfocus.com
- https://service.sap.com/sap/support/notes/1917381 service.sap.com
- http://scn.sap.com/docs/DOC-8218 scn.sap.com
- http://seclists.org/fulldisclosure/2014/Apr/300 seclists.org
- http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-007 www.onapsis.com
- http://www.securityfocus.com/bid/67103 www.securityfocus.com
- https://service.sap.com/sap/support/notes/1917381 service.sap.com