CVE-2014-8312

 

Published at: - 16-10-2014 09:55

Last modified: - 06-10-2022 05:20

Total changes: - 2

Description

Business Warehouse (BW) in SAP Netweaver AS ABAP 7.31 allows remote authenticated users to obtain sensitive information via a request to the RSDU_CCMS_GET_PROFILE_PARAM RFC function.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:M/Au:S/C:P/I:N/A:N

 

Verification logic

 

Reference

• http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-033
• https://service.sap.com/sap/support/notes/1967780
• 70292-
• http://scn.sap.com/docs/DOC-8218
• http://packetstormsecurity.com/files/128603/SAP-Business-Warehouse-Missing-Authorization-Check.html
• 20141008 [Onapsis Security Advisory 2014-033] SAP Business Warehouse Missing Authorization Check-
• 61101-
• sap-business-warehouse-sec-bypass(96877)-
• 20141008 [Onapsis Security Advisory 2014-033] SAP Business Warehouse Missing Authorization Check-

 

Keywords

NVD

 

CVE-2014-8312

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures