CVE

Id
72468  
CVE No.
CVE-2014-5171  
Status
Candidate  
Description
SAP HANA Extend Application Services (XS) does not encrypt transmissions for applications that enable form based authentication using SSL, which allows remote attackers to obtain credentials and other sensitive information by sniffing the network.  
Phase
Assigned (20140731)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
684517 72468 CVE-2014-5171 BUGTRAQ:20140729 [Onapsis Security Advisory 2014-021] SAP HANA XS Missing encryption in form-based authentication  View
684518 72468 CVE-2014-5171 URL:http://www.securityfocus.com/archive/1/archive/1/532940/100/0/threaded  View
684519 72468 CVE-2014-5171 FULLDISC:20140729 [Onapsis Security Advisory 2014-021] SAP HANA XS Missing encryption in form-based authentication  View
684520 72468 CVE-2014-5171 URL:http://seclists.org/fulldisclosure/2014/Jul/149  View
684521 72468 CVE-2014-5171 MISC:http://packetstormsecurity.com/files/127666/SAP-HANA-XS-Missing-Encryption.html  View
684522 72468 CVE-2014-5171 MISC:http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-021  View
684523 72468 CVE-2014-5171 CONFIRM:http://scn.sap.com/docs/DOC-8218  View
684524 72468 CVE-2014-5171 CONFIRM:https://service.sap.com/sap/support/notes/1963932  View
684525 72468 CVE-2014-5171 BID:68947  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
14829 JVNDB-2014-003704 Freelinking for Case Tracker モジュールで使用される Drupal 用 freelinking モジュールにおける重要な情報を取得される脆弱性 Freelinking for Case Tracker モジュールで使用される Drupal 用 freelinking モジュールは、(1) ノードまたは (2) ユーザに対してアクセス権限を適切にチェックしないため、重要な情報を取得される脆弱性が存在します。 CVE-2014-5179 72468 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003704.html  View