CVE-2014-4007

SAP Upgrade tools - Info Disclosure

Title source: llm
STIX 2.1

Description

The SAP Upgrade tools for ABAP has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors.

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/67920
Mailing List mailing-list x_refsource_fulldisc
http://seclists.org/fulldisclosure/2014/Jun/36
Various Sources x_refsource_confirm
http://scn.sap.com/docs/DOC-8218
Various Sources x_refsource_confirm
https://service.sap.com/sap/support/notes/1915873

Scores

EPSS 0.0032
EPSS Percentile 55.0%

Details

CWE
CWE-255
Status published
Products (1)
sap/upgrade_tools
Published Jun 09, 2014
Tracked Since Feb 18, 2026