CVE-2014-4008

SAP Web Services Tool - Info Disclosure

Title source: llm
STIX 2.1

Description

SAP Web Services Tool (CA-WUI-WST) has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors.

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/67920
Mailing List mailing-list x_refsource_fulldisc
http://seclists.org/fulldisclosure/2014/Jun/36
Various Sources x_refsource_confirm
https://service.sap.com/sap/support/notes/1914777
Various Sources x_refsource_confirm
http://scn.sap.com/docs/DOC-8218

Scores

EPSS 0.0029
EPSS Percentile 52.7%

Details

CWE
CWE-255
Status published
Products (1)
sap/web_services_tool
Published Jun 09, 2014
Tracked Since Feb 18, 2026