Lucene search

K
cve[email protected]CVE-2013-3319
HistoryAug 16, 2013 - 5:55 p.m.

CVE-2013-3319

2013-08-1617:55:05
CWE-200
web.nvd.nist.gov
28
cve-2013-3319
sap netweaver
hostcontrol service
information disclosure
remote attack
soap request

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.2 Medium

AI Score

Confidence

Low

0.031 Low

EPSS

Percentile

91.1%

The GetComputerSystem method in the HostControl service in SAP Netweaver 7.03 allows remote attackers to obtain sensitive information via a crafted SOAP request to TCP port 1128.

Affected configurations

NVD
Node
sapnetweaverMatch7.03
CPENameOperatorVersion
sap:netweaversap netweavereq7.03

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.2 Medium

AI Score

Confidence

Low

0.031 Low

EPSS

Percentile

91.1%

Related for CVE-2013-3319