CVE-2013-7364

Published Apr 10, 2014

Last updated 11 years ago

Overview

Description: An unspecified J2EE core service in the J2EE Engine in SAP NetWeaver does not properly restrict access, which allows remote attackers to read and write to arbitrary files via unknown vectors.
Source: cve@mitre.org
NVD status: Analyzed

Risk scores

CVSS 2.0

Type: Primary
Base score: 7.5
Impact score: 6.4
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: CWE-264

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:sap:netweaver:-:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "CB7AAA9B-5209-4419-87DA-8130843AD2AF"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References