NVD

Id
28697  
Name
CVE-2015-8600  
Description
The SysAdminWebTool servlets in SAP Mobile Platform allow remote attackers to bypass authentication and obtain sensitive information, gain privileges, or have unspecified other impact via unknown vectors, aka SAP Security Note 2227855.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-12-17  
Modified Date
2015-12-18  
Seq
2015-8600  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
150939 28697 CVE-2015-8600 http://erpscan.com/advisories/10761/  View
150940 28697 CVE-2015-8600 http://scn.sap.com/community/security/blog/2015/12/09/sap-security-notes-december-2015--review  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11155 JVNDB-2015-006475 SAP Mobile Platform の SysAdminWebTool サーブレットにおける認証を回避される脆弱性 SAP Mobile Platform の SysAdminWebTool サーブレットには、認証を回避され、重要な情報を取得される、権限を取得されるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2015-8600 85825 CVE-2015-8600 28697 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006475.html 2015-12-08 2015-12-21 View