CVE-2015-2816

Published: Apr 1, 2015

Modified: Aug 6, 2024

PUBLISHED

Description

The XcListener in SAP Afaria 7.0.6001.5 does not properly restrict access, which allows remote attackers to have unspecified impact via a crafted request, aka SAP Security Note 2134905.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

20150625 [ERPSCAN-15-009] SAP Afaria 7 XcListener - Missing authorization check

mailing-list

x_refsource_BUGTRAQ

73708

vdb-entry

x_refsource_BID

http://packetstormsecurity.com/files/132363/SAP-Afaria-7-Missing-Authorization-Check.html

x_refsource_MISC

20150623 ERPSCAN Research Advisory [ERPSCAN-15-009] SAP Afaria 7 XcListener - Missing authorization check

mailing-list

x_refsource_FULLDISC

https://erpscan.io/advisories/erpscan-15-009-sap-afaria-7-xclistener-missing-authorization-check/

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2015-2816

Description

Affected Products

References