CVEvulnerability
CVE-2014-3133
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-04-30
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
SAP Netweaver Java Application Server does not properly restrict access, which allows remote attackers to obtain the list of SAP systems registered on an SLD via an unspecified webdynpro, related to SystemSelection.
Affected configurations
• sap netweaver java application server
Related
Weakness · not in database (1)
References
- http://scn.sap.com/docs/DOC-8218 scn.sap.com
- http://seclists.org/fulldisclosure/2014/Apr/301 seclists.org
- http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-008 www.onapsis.com
- http://www.securityfocus.com/bid/67104 www.securityfocus.com
- https://service.sap.com/sap/support/notes/1922547 service.sap.com
- http://scn.sap.com/docs/DOC-8218 scn.sap.com
- http://seclists.org/fulldisclosure/2014/Apr/301 seclists.org
- http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-008 www.onapsis.com
- http://www.securityfocus.com/bid/67104 www.securityfocus.com
- https://service.sap.com/sap/support/notes/1922547 service.sap.com