CVE

Id
72470  
CVE No.
CVE-2014-5173  
Status
Candidate  
Description
SAP HANA Extend Application Services (XS) allows remote attackers to bypass access restrictions via a request to a private IU5 SDK application that was once public.  
Phase
Assigned (20140731)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
684539 72470 CVE-2014-5173 BUGTRAQ:20140729 [Onapsis Security Advisory 2014-022] SAP HANA IU5 SDK Authentication Bypass  View
684540 72470 CVE-2014-5173 URL:http://www.securityfocus.com/archive/1/archive/1/532944/100/0/threaded  View
684541 72470 CVE-2014-5173 FULLDISC:20140729 [Onapsis Security Advisory 2014-022] SAP HANA IU5 SDK Authentication Bypass  View
684542 72470 CVE-2014-5173 URL:http://seclists.org/fulldisclosure/2014/Jul/150  View
684543 72470 CVE-2014-5173 MISC:http://packetstormsecurity.com/files/127667/SAP-HANA-IU5-SDK-Authentication-Bypass.html  View
684544 72470 CVE-2014-5173 CONFIRM:http://scn.sap.com/docs/DOC-8218  View
684545 72470 CVE-2014-5173 CONFIRM:https://service.sap.com/sap/support/notes/1964428  View
684546 72470 CVE-2014-5173 BID:68950  View
684547 72470 CVE-2014-5173 URL:http://www.securityfocus.com/bid/68950  View
684548 72470 CVE-2014-5173 XF:sap-hanaxs-sec-bypass(94931)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
14819 JVNDB-2014-003694 WordPress 用 Last.fm Rotation プラグインの lastfm-proxy.php におけるディレクトリトラバーサルの脆弱性 WordPress 用 Last.fm Rotation (lastfm-rotation) プラグインの lastfm-proxy.php には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2014-5181 72470 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003694.html  View