Back to search
CVE-2014-8312
Published: Oct 16, 2014
Modified: Aug 6, 2024
PUBLISHED
Description
Business Warehouse (BW) in SAP Netweaver AS ABAP 7.31 allows remote authenticated users to obtain sensitive information via a request to the RSDU_CCMS_GET_PROFILE_PARAM RFC function.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
20141008 [Onapsis Security Advisory 2014-033] SAP Business Warehouse Missing Authorization Check
mailing-list
x_refsource_BUGTRAQ
70292
vdb-entry
x_refsource_BID
20141008 [Onapsis Security Advisory 2014-033] SAP Business Warehouse Missing Authorization Check
mailing-list
x_refsource_FULLDISC
61101
third-party-advisory
x_refsource_SECUNIA
http://scn.sap.com/docs/DOC-8218
x_refsource_CONFIRM
https://service.sap.com/sap/support/notes/1967780
x_refsource_CONFIRM
sap-business-warehouse-sec-bypass(96877)
vdb-entry
x_refsource_XF
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now