Lucene search
HistoryApr 30, 2014 - 2:22 p.m.
CVE-2014-3130
abap help
documentation
translation tools
basis
sap netweaver
abap application server
cve-2014-3130
nvd
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.9 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
The ABAP Help documentation and translation tools (BC-DOC-HLP) in Basis in SAP Netweaver ABAP Application Server does not properly restrict access, which allows local users to gain privileges and execute ABAP instructions via crafted help messages.
Affected configurations
Node
sapnetweaver_abap_application_serverMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| sap:netweaver_abap_application_server | sap netweaver abap application server | eq | - |
Related
prion
prion
Design/Logic Flaw
2014-04-30 14:22:00
cvelist
cvelist
CVE-2014-3130
2014-04-30 14:00:00
nvd
nvd
CVE-2014-3130
2014-04-30 14:22:07
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.9 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2014-3130