6.8

CVE-2015-2107

HP Operations Manager i Management Pack 1.x before 1.01 for SAP allows local users to execute OS commands by leveraging SAP administrative privileges.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hp ≫ Operations Manager I Management Pack Version1.0
   SAP ≫ Netweaver Version-
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.33% 0.246
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.8 3.1 10
AV:L/AC:L/Au:S/C:C/I:C/A:C
CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04588084
Vendor Advisory
http://www.securitytracker.com/id/1031870