CVEvulnerability

CVE-2014-6284

7.5 HIGH Published 2015-06-08 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2015-06-08
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 2.0 ([email protected]): 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses: CWE-264

Description

SAP Adaptive Server Enterprise (ASE) before 15.7 SP132 and 16.0 before 16.0 SP01 allows remote attackers to bypass the challenge and response mechanism and obtain access to the probe account via a crafted response, aka SAP Security Note 2113995.

Affected configurations

• sybase adaptive server enterprise (<= 15.7) • sybase adaptive server enterprise 16.0

Weakness · not in database (1)

CWE-264

References

https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2015-004/?fid=6200 Exploit
https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2015-004/?fid=6200 Exploit

CVE-2014-6284

Description

Affected configurations

Related

Weakness · not in database (1)

References