CVE-2013-7364

N/A

Descricao

An unspecified J2EE core service in the J2EE Engine in SAP NetWeaver does not properly restrict access, which allows remote attackers to read and write to arbitrary files via unknown vectors.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado4/10/2014

Ultima modificacao4/12/2025

Fontenvd

Avistamentos honeypot0

Produtos afetados

sap:netweaver

Fraquezas (CWE)

CWE-264

Referencias

http://archives.neohapsis.com/archives/bugtraq/2013-02/0133.html(cve@mitre.org)

http://scn.sap.com/docs/DOC-8218(cve@mitre.org)

http://www.onapsis.com/get.php?resid=adv_onapsis-2013-004(cve@mitre.org)

http://www.onapsis.com/research-advisories.php(cve@mitre.org)

https://service.sap.com/sap/support/notes/1682613(cve@mitre.org)

http://archives.neohapsis.com/archives/bugtraq/2013-02/0133.html(af854a3a-2127-422b-91ae-364da2661108)

http://scn.sap.com/docs/DOC-8218(af854a3a-2127-422b-91ae-364da2661108)

http://www.onapsis.com/get.php?resid=adv_onapsis-2013-004(af854a3a-2127-422b-91ae-364da2661108)

http://www.onapsis.com/research-advisories.php(af854a3a-2127-422b-91ae-364da2661108)

https://service.sap.com/sap/support/notes/1682613(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.