CVEvulnerability
CVE-2014-8587
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-11-04
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-310
Description
SAPCRYPTOLIB before 5.555.38, SAPSECULIB, and CommonCryptoLib before 8.4.30, as used in SAP NetWeaver AS for ABAP and SAP HANA, allows remote attackers to spoof Digital Signature Algorithm (DSA) signatures via unspecified vectors.
Affected configurations
• sap commoncryptolib (<= 8.4.29)
• sap sapcryptolib (<= 5.555.37)
• sap sapseculib
• sap hana
• sap netweaver
Related
Weakness · not in database (1)
References
- http://blog.onapsis.com/sap-security-note-2067859-potential-exposure-to-digital-signature-spoofing/ Broken Link
- http://secunia.com/advisories/57606 Not Applicable
- http://service.sap.com/sap/support/notes/2067859 Permissions Required
- https://twitter.com/SAP_Gsupport/status/522401681997570048 Broken Link
- http://blog.onapsis.com/sap-security-note-2067859-potential-exposure-to-digital-signature-spoofing/ Broken Link
- http://secunia.com/advisories/57606 Not Applicable
- http://service.sap.com/sap/support/notes/2067859 Permissions Required
- https://twitter.com/SAP_Gsupport/status/522401681997570048 Broken Link