NVD

Id
38934  
Name
CVE-2013-3061  
Description
The ISHMED-PATRED_TRANSACT_RFCCALL function in the IS-H Industry-Specific Component Hospital subsystem in SAP Healthcare Industry Solution, and the SAP ERP central component (aka ECC 6), allows remote authenticated users to bypass intended transaction restrictions via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-05-01  
Modified Date
2013-11-18  
Seq
2013-3061  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
199538 38934 CVE-2013-3061 20130416 [ESNC-2013-001] Privilege Escalation in SAP Healthcare Industry Solution  View
199539 38934 CVE-2013-3061 http://scn.sap.com/docs/DOC-8218  View
199540 38934 CVE-2013-3061 http://www.esnc.de/sap-security-audit-and-scan-services/security-advisories/36-privilege-escalation-in-sap-is-healthcare  View
199541 38934 CVE-2013-3061 https://service.sap.com/sap/support/notes/1691744  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20956 JVNDB-2013-002531 SAP industry solution for healthcare および SAP ERP Central Component におけるトランザクションの制限を回避される脆弱性 SAP industry solution for healthcare の IS-H Industry-Specific Component Hospital サブシステムの ISHMED-PATRED_TRANSACT_RFCCALL 関数、および SAP ERP Central Component (別名 ECC 6) には、トランザクションの制限を回避される脆弱性が存在します。 CVE-2013-3061 63003 CVE-2013-3061 38934 6.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002531.html 2013-04-16 2013-05-02 View