CVE-2003-0747: Medium severity SAP Internet Transaction Server vulnerability
wgate.dll in SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to obtain potentially sensitive information such as directory structure and operating system via incorrect parameters (1) ~service, (2) ~templatelanguage, (3) ~language, (4) ~theme, or (5) ~template, which leaks the information in the resulting error message.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2003-0747?
CVE-2003-0747 has a severity rating that indicates it can potentially expose sensitive information, increasing the risk of further exploitation.
How do I fix CVE-2003-0747?
To mitigate CVE-2003-0747, ensure that you're using an updated version of SAP Internet Transaction Server that has addressed this vulnerability.
What information can be leaked due to CVE-2003-0747?
CVE-2003-0747 may allow attackers to access sensitive information such as the directory structure and operating system details.
Which version of SAP Internet Transaction Server is affected by CVE-2003-0747?
CVE-2003-0747 specifically affects SAP Internet Transaction Server version 4620.2.0.323011.
Is it possible to exploit CVE-2003-0747 remotely?
Yes, CVE-2003-0747 can be exploited remotely by attackers to obtain sensitive information through incorrect parameters.