Lucene search

MitreCVE-2014-2752

HistoryApr 10, 2014 - 8:55 p.m.

CVE-2014-2752

2014-04-1020:55:14

CWE-255

mitre

web.nvd.nist.gov

sap

business object processing framework

bopf

abap

hardcoded credentials

remote attackers

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.8

Confidence

Low

EPSS

0.008

Percentile

81.2%

JSON

SAP Business Object Processing Framework (BOPF) for ABAP has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors.

Affected configurations

Nvd

Node

sapbusiness_object_processing_framework_for_abapMatch-

VendorProductVersionCPE
sapbusiness_object_processing_framework_for_abap-cpe:2.3:a:sap:business_object_processing_framework_for_abap:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
sap	business_object_processing_framework_for_abap	-	cpe:2.3:a:sap:business_object_processing_framework_for_abap:-:::::::*

References

secunia.com/advisories/57736

www.onapsis.com/get.php?resid=adv_onapsis-2014-003

www.onapsis.com/research-advisories.php

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.8

Confidence

Low

EPSS

0.008

Percentile

81.2%

JSON

Related for CVE-2014-2752