NVD

Id
32925  
Name
CVE-2014-5176  
Description
SAP FI Manager Self-Service has a hard-coded user name, which makes it easier for remote attackers to obtain access via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-07-31  
Modified Date
2015-12-14  
Seq
2014-5176  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
172920 32925 CVE-2014-5176 http://packetstormsecurity.com/files/127669/SAP-FI-Manager-Self-Service-Hardcoded-Username.html  View
172921 32925 CVE-2014-5176 http://scn.sap.com/docs/DOC-8218  View
172922 32925 CVE-2014-5176 20140729 [Onapsis Security Advisory 2014-024] Hard-coded Username in SAP FI Manager Self-Service  View
172923 32925 CVE-2014-5176 http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-024  View
172924 32925 CVE-2014-5176 20140729 [Onapsis Security Advisory 2014-024] Hard-coded Username in SAP FI Manager Self-Service  View
172925 32925 CVE-2014-5176 68951  View
172926 32925 CVE-2014-5176 sap-fimanager-default-account(94923)  View
172927 32925 CVE-2014-5176 https://service.sap.com/sap/support/notes/1929473  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
14784 JVNDB-2014-003659 SAP FI Manager Self-Service におけるアクセス権を取得される脆弱性 SAP FI Manager Self-Service は、ハードコードされたユーザ名を使用するため、アクセス権を取得される脆弱性が存在します。 CVE-2014-5176 72465 CVE-2014-5176 32925 6 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003659.html 2014-04-18 2014-08-04 View