CVE-2015-3978

Description

SAP Sybase Unwired Platform Online Data Proxy allows local users to obtain usernames and passwords via the DataVault, aka SAP Security Note 2094830.

Predictions

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

References

• http://www.onapsis.com/blog/analyzing-sap-security-notes-april-2015-edition/
• http://www.securityfocus.com/bid/74625
• http://www.securitytracker.com/id/1032310
• https://erpscan.io/press-center/blog/sap-security-notes-april-2015/
• http://www.onapsis.com/blog/analyzing-sap-security-notes-april-2015-edition/
• http://www.securityfocus.com/bid/74625
• http://www.securitytracker.com/id/1032310
• https://erpscan.io/press-center/blog/sap-security-notes-april-2015/

CWEs

CWE-200