CVE-2016-4551

EPSS 0.29%
Veröffentlicht 05.10.2016 16:59:02
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

The (1) SAP_BASIS and (2) SAP_ABA components 7.00 SP Level 0031 in SAP NetWeaver 2004s might allow remote attackers to spoof IP addresses written to the Security Audit Log via vectors related to the network landscape, aka SAP Security Note 2190621.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

SAP ≫ Netweaver Version2004s

SAP ≫ Sap Aba Version7.00 Updatesp_level_0031

SAP ≫ Sap Basis Version7.00 Updatesp_level_0031

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.29%	0.495

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	3.9	3.6	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:P/A:N

CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

http://seclists.org/fulldisclosure/2016/Oct/3

Third Party Advisory

Mailing List

http://www.securityfocus.com/bid/93288

https://www.onapsis.com/research/security-advisories/sap-security-audit-log-invalid-address-logging

Third Party Advisory

Permissions Required

https://nvd.nist.gov/vuln/detail/CVE-2016-4551

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-4551

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-4551

EUVD