CVE-2015-4161

Published Jun 2, 2015

Last updated 8 years ago

Overview

Description: SAP Afaria does not properly restrict access to unspecified functionality, which allows remote attackers to obtain sensitive information, gain privileges, or have other unspecified impact via unknown vectors, SAP Security Note 2155690.
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 7.5
Impact score: 6.4
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: CWE-264

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:sap:afaria:-:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "44B4C9B8-6480-444F-9F6E-C0B13CAA89EF"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References