CVE-2015-2816
First published: Wed Apr 01 2015(Updated: )
The XcListener in SAP Afaria 7.0.6001.5 does not properly restrict access, which allows remote attackers to have unspecified impact via a crafted request, aka SAP Security Note 2134905.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SAP Afaria | =7.0.6001.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://packetstormsecurity.com/files/132363/SAP-Afaria-7-Missing-Authorization-Check.html
- http://seclists.org/fulldisclosure/2015/Jun/67
- http://www.securityfocus.com/archive/1/535830/100/800/threaded
- http://www.securityfocus.com/bid/73708
- https://erpscan.io/advisories/erpscan-15-009-sap-afaria-7-xclistener-missing-authorization-check/
Frequently Asked Questions
What is the severity of CVE-2015-2816?
CVE-2015-2816 is considered to have a medium severity due to the potential for remote attacks.
How do I fix CVE-2015-2816?
To fix CVE-2015-2816, you should apply the security patches provided in SAP Security Note 2134905.
What impact can CVE-2015-2816 have on my system?
CVE-2015-2816 can allow remote attackers to access sensitive resources through crafted requests.
In which software versions does CVE-2015-2816 exist?
CVE-2015-2816 affects SAP Afaria version 7.0.6001.5.
Who should be concerned about CVE-2015-2816?
Organizations using SAP Afaria 7.0.6001.5 should be concerned about CVE-2015-2816 due to the associated security risks.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/author
- agent/references
- agent/last-modified-date
- agent/tags
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- vendor/sap
- canonical/sap afaria
- version/sap afaria/7.0.6001.5