NVD

Id
28519  
Name
CVE-2015-8329  
Description
SAP Manufacturing Integration and Intelligence (aka MII, formerly xMII) uses weak encryption (Base64 and DES), which allows attackers to conduct downgrade attacks and decrypt passwords via unspecified vectors, aka SAP Security Note 2240274.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2015-11-24  
Modified Date
2016-12-02  
Seq
2015-8329  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
149857 28519 CVE-2015-8329 http://erpscan.com/advisories/erpscan-15-031-using-base64-and-des-in-sap-mii/  View
149858 28519 CVE-2015-8329 http://packetstormsecurity.com/files/135761/SAP-MII-12.2-14.0-15.0-Cryptography-Issues.html  View
149859 28519 CVE-2015-8329 20160212 [ERPSCAN-15-031] SAP MII - Encryption Downgrade vulnerability  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
10704 JVNDB-2015-006024 SAP Manufacturing Integration and Intelligence におけるダウングレード攻撃を実行される脆弱性 SAP Manufacturing Integration and Intelligence (別名 MII、旧 xMII) は、脆弱な暗号 (Base64 および DES) を使用するため、ダウングレード攻撃を実行され、パスワードを解読される脆弱性が存在します。 CVE-2015-8329 85554 CVE-2015-8329 28519 5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006024.html 2015-11-10 2015-11-26 View