Unscored CVE-2002-1577 EUVD-2002-1558GHSA-6cvg-289c-g5fj

SAP R/3 2.0B to 4.6D installs several clients with default users and passwords, which allows remote attackers to gain privileges via the (1…

Published Mar 16, 2004 · Updated Aug 8, 2024 · Assigned by mitre

Description

SAP R/3 2.0B to 4.6D installs several clients with default users and passwords, which allows remote attackers to gain privileges via the (1) SAP*, (2) SAPCPIC, (3) DDIC, (4) EARLYWATCH, or (5) TMSADM accounts.

References

sap-r3-default-account(9964) vdb-entry
20020825 SAP R/3 default password vulnerability mailing-list