Unscored CVE-2014-3131 EUVD-2014-3151GHSA-hj6g-2wqx-rw4f

SAP Profile Maintenance does not properly restrict access, which allows remote authenticated users to obtain sensitive information via an u…

Published Apr 30, 2014 · Updated Aug 6, 2024 · Assigned by mitre

Description

SAP Profile Maintenance does not properly restrict access, which allows remote authenticated users to obtain sensitive information via an unspecified RFC function, related to SAP Solution Manager 7.1.

References

https://service.sap.com/sap/support/notes/1917381
20140428 [Onapsis Security Advisory 2014-007] Missing authorization check in SAP Profile Maintenance mailing-list
http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-007
67103 vdb-entry
http://scn.sap.com/docs/DOC-8218