NVD

Id
26337  
Name
CVE-2015-5067  
Description
The (1) Cross-System Tools and (2) Data Transfer Workbench in SAP NetWeaver have hardcoded credentials, which allows remote attackers to obtain access via unspecified vectors, aka SAP Security Notes 2059659 and 2057982.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-06-24  
Modified Date
2016-12-29  
Seq
2015-5067  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
139271 26337 CVE-2015-5067 http://erpscan.com/advisories/erpscan-15-015-sap-netweaver-hardcoded-credentials/  View
139272 26337 CVE-2015-5067 http://erpscan.com/advisories/erpscan-15-016-sap-netweaver-hardcoded-credentials/  View
139273 26337 CVE-2015-5067 http://packetstormsecurity.com/files/133515/SAP-NetWeaver-AS-FKCDBFTRACE-ABAP-Hardcoded-Credentials.html  View
139274 26337 CVE-2015-5067 http://packetstormsecurity.com/files/133516/SAP-NetWeaver-AS-LSCT1I13-ABAP-Hardcoded-Credentials.html  View
139275 26337 CVE-2015-5067 http://scn.sap.com/community/security/blog/2015/06/11/sap-security-notes-june-2015  View
139276 26337 CVE-2015-5067 75165  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
7944 JVNDB-2015-003264 SAP NetWeaver の Cross-System Tools および Data Transfer Workbench におけるアクセス権を取得される脆弱性 SAP NetWeaver の (1) Cross-System Tools および (2) Data Transfer Workbench は、ハードコードされた認証情報を持つため、アクセス権を取得される脆弱性が存在します。 CVE-2015-5067 82292 CVE-2015-5067 26337 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003264.html 2015-06-11 2015-10-05 View