CVE

Id
72472  
CVE No.
CVE-2014-5175  
Status
Candidate  
Description
The License Measurement servlet in SAP Solution Manager 7.1 allows remote attackers to bypass authentication via unspecified vectors, related to a verb tampering attack and SAP_JTECHS.  
Phase
Assigned (20140731)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
684560 72472 CVE-2014-5175 FULLDISC:20140729 [Onapsis Security Advisory 2014-023] HTTP verb tampering issue in SAP_JTECHS  View
684561 72472 CVE-2014-5175 URL:http://seclists.org/fulldisclosure/2014/Jul/151  View
684562 72472 CVE-2014-5175 MISC:http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-023  View
684563 72472 CVE-2014-5175 CONFIRM:http://scn.sap.com/docs/DOC-8218  View
684564 72472 CVE-2014-5175 CONFIRM:https://service.sap.com/sap/support/notes/1778940  View
684565 72472 CVE-2014-5175 BID:68949  View
684566 72472 CVE-2014-5175 URL:http://www.securityfocus.com/bid/68949  View
684567 72472 CVE-2014-5175 SECUNIA:59548  View
684568 72472 CVE-2014-5175 URL:http://secunia.com/advisories/59548  View
684569 72472 CVE-2014-5175 XF:sap-solution-manager-dos(94932)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
14821 JVNDB-2014-003696 WordPress 用 Simple Retail Menus プラグインの includes/mode-edit.php における SQL インジェクションの脆弱性 WordPress 用 Simple Retail Menus (simple-retail-menus) プラグインの includes/mode-edit.php には、SQL インジェクションの脆弱性が存在します。 CVE-2014-5183 72472 6.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003696.html  View