CVE-2015-5067
First published: Wed Jun 24 2015(Updated: )
The (1) Cross-System Tools and (2) Data Transfer Workbench in SAP NetWeaver have hardcoded credentials, which allows remote attackers to obtain access via unspecified vectors, aka SAP Security Notes 2059659 and 2057982.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SAP NetWeaver |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://packetstormsecurity.com/files/133515/SAP-NetWeaver-AS-FKCDBFTRACE-ABAP-Hardcoded-Credentials.html
- http://packetstormsecurity.com/files/133516/SAP-NetWeaver-AS-LSCT1I13-ABAP-Hardcoded-Credentials.html
- http://scn.sap.com/community/security/blog/2015/06/11/sap-security-notes-june-2015
- http://www.securityfocus.com/bid/75165
- https://erpscan.io/advisories/erpscan-15-015-sap-netweaver-hardcoded-credentials/
- https://erpscan.io/advisories/erpscan-15-016-sap-netweaver-hardcoded-credentials/
Frequently Asked Questions
What is the severity of CVE-2015-5067?
CVE-2015-5067 has a medium severity rating due to the use of hardcoded credentials in SAP NetWeaver.
How do I fix CVE-2015-5067?
To mitigate CVE-2015-5067, update your SAP NetWeaver installation with the appropriate security patches provided in SAP Security Notes 2059659 and 2057982.
What impact does CVE-2015-5067 have on SAP NetWeaver?
CVE-2015-5067 allows remote attackers to access SAP NetWeaver systems using hardcoded credentials.
Which versions of SAP NetWeaver are affected by CVE-2015-5067?
CVE-2015-5067 affects all versions of SAP NetWeaver that utilize the Cross-System Tools and Data Transfer Workbench functionalities.
Is CVE-2015-5067 currently being exploited in the wild?
As of the latest reports, there have been no confirmed active exploitation cases of CVE-2015-5067.
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/author
- agent/severity
- agent/tags
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- vendor/sap
- canonical/sap netweaver