CVEvulnerability
CVE-2015-5067
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-06-24
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-255
Description
The (1) Cross-System Tools and (2) Data Transfer Workbench in SAP NetWeaver have hardcoded credentials, which allows remote attackers to obtain access via unspecified vectors, aka SAP Security Notes 2059659 and 2057982.
Affected configurations
• sap netweaver
Related
Weakness · not in database (1)
References
- http://packetstormsecurity.com/files/133515/SAP-NetWeaver-AS-FKCDBFTRACE-ABAP-Hardcoded-Credentials.html Third Party Advisory, VDB Entry
- http://packetstormsecurity.com/files/133516/SAP-NetWeaver-AS-LSCT1I13-ABAP-Hardcoded-Credentials.html Third Party Advisory, VDB Entry
- http://scn.sap.com/community/security/blog/2015/06/11/sap-security-notes-june-2015 Vendor Advisory
- http://www.securityfocus.com/bid/75165 Third Party Advisory, VDB Entry
- https://erpscan.io/advisories/erpscan-15-015-sap-netweaver-hardcoded-credentials/ erpscan.io
- https://erpscan.io/advisories/erpscan-15-016-sap-netweaver-hardcoded-credentials/ erpscan.io
- http://packetstormsecurity.com/files/133515/SAP-NetWeaver-AS-FKCDBFTRACE-ABAP-Hardcoded-Credentials.html Third Party Advisory, VDB Entry
- http://packetstormsecurity.com/files/133516/SAP-NetWeaver-AS-LSCT1I13-ABAP-Hardcoded-Credentials.html Third Party Advisory, VDB Entry
- http://scn.sap.com/community/security/blog/2015/06/11/sap-security-notes-june-2015 Vendor Advisory
- http://www.securityfocus.com/bid/75165 Third Party Advisory, VDB Entry
- https://erpscan.io/advisories/erpscan-15-015-sap-netweaver-hardcoded-credentials/ erpscan.io
- https://erpscan.io/advisories/erpscan-15-016-sap-netweaver-hardcoded-credentials/ erpscan.io