NVD

Id
21851  
Name
CVE-2016-7437  
Description
SAP Netweaver 7.40 improperly logs (1) DUI and (2) DUJ events in the SAP Security Audit Log as non-critical, which might allow local users to hide rejected attempts to execute RFC function callbacks by leveraging filtering of non-critical events in audit analysis reports, aka SAP Security Note 2252312.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2016-10-13  
Modified Date
2016-10-13  
Seq
2016-7437  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
117187 21851 CVE-2016-7437 20161011 Onapsis Security Advisory ONAPSIS-2016-051: SAP Business Objects Memory Corruption  View
117188 21851 CVE-2016-7437 https://www.onapsis.com/research/security-advisories/sap-business-objects-memory-corruption-0  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
4649 JVNDB-2016-005422 SAP Netweaver における RFC 機能のコールバックの実行を拒否したことを隠蔽される脆弱性 SAP Netweaver は、(1) DUI および (2) DUJ イベントを non-critical として SAP Security Audit Log に不適切にログを作成するため、RFC 機能のコールバックの実行を拒否したことを隠蔽される脆弱性が存在します。 CVE-2016-7437 93944 CVE-2016-7437 21851 2.1 3.3 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005422.html 2016-10-11 2016-10-20 View