Sign-up

ID

VAR-201302-0421


TITLE

SAP Portal PDC Information Disclosure Vulnerability

Trust: 0.8

sources: IVD: 055b1f9a-1f34-11e6-abef-000c29c66e3d // CNVD: CNVD-2013-01358

DESCRIPTION

SAP NetWeaver is the technical foundation for SAP Business Suite solutions, SAP xApps composite applications, partner solutions, and custom applications. The SAP Enterprise Portal Federation configuration page does not properly handle validation, allowing for the disclosure of entire Portal schema information

Trust: 0.72

sources: CNVD: CNVD-2013-01358 // IVD: 055b1f9a-1f34-11e6-abef-000c29c66e3d

IOT TAXONOMY

category:['ICS']sub_category: -

Trust: 0.8

sources: IVD: 055b1f9a-1f34-11e6-abef-000c29c66e3d // CNVD: CNVD-2013-01358

AFFECTED PRODUCTS

vendor:sapmodel:netweaverscope:eqversion:7.x

Trust: 0.6

vendor:sapmodel:enterprise portalscope: - version: -

Trust: 0.6

vendor:sapmodel:netweaverscope:eqversion:7.x*

Trust: 0.2

vendor:sapmodel:enterprise portal nullscope:eqversion:*

Trust: 0.2

sources: IVD: 055b1f9a-1f34-11e6-abef-000c29c66e3d // CNVD: CNVD-2013-01358

CVSS

SEVERITY

CVSSV2

CVSSV3

IVD: 055b1f9a-1f34-11e6-abef-000c29c66e3d
value: MEDIUM

Trust: 0.2

IVD: 055b1f9a-1f34-11e6-abef-000c29c66e3d
severity: NONE
baseScore: NONE
vectorString: NONE
accessVector: NONE
accessComplexity: NONE
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: NONE
impactScore: NONE
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: UNKNOWN

Trust: 0.2

sources: IVD: 055b1f9a-1f34-11e6-abef-000c29c66e3d

TYPE

Information leakage

Trust: 0.2

sources: IVD: 055b1f9a-1f34-11e6-abef-000c29c66e3d

PATCH

title:Patch for SAP Portal PDC Information Disclosure Vulnerabilityurl:https://www.cnvd.org.cn/patchinfo/show/32381

Trust: 0.6

sources: CNVD: CNVD-2013-01358

EXTERNAL IDS

db:CNVDid:CNVD-2013-01358

Trust: 0.8

db:IVDid:055B1F9A-1F34-11E6-ABEF-000C29C66E3D

Trust: 0.2

sources: IVD: 055b1f9a-1f34-11e6-abef-000c29c66e3d // CNVD: CNVD-2013-01358

REFERENCES

url:http://archives.neohapsis.com/archives/bugtraq/2013-02/0130.html

Trust: 0.6

sources: CNVD: CNVD-2013-01358

SOURCES

db:IVDid:055b1f9a-1f34-11e6-abef-000c29c66e3d
db:CNVDid:CNVD-2013-01358

LAST UPDATE DATE

2022-05-17T01:51:13.079000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2013-01358date:2013-05-28T00:00:00

SOURCES RELEASE DATE

db:IVDid:055b1f9a-1f34-11e6-abef-000c29c66e3ddate:2013-02-28T00:00:00
db:CNVDid:CNVD-2013-01358date:2013-02-28T00:00:00