Unscored CVE-2018-11247 EUVD-2018-3287GHSA-fvx3-47rw-xhxr

The JMX/RMI interface in Nasdaq BWise 5.0 does not require authentication for an SAP BO Component, which allows remote attackers to execute…

Published Aug 15, 2018 · Updated Aug 5, 2024 · Assigned by mitre

Description

The JMX/RMI interface in Nasdaq BWise 5.0 does not require authentication for an SAP BO Component, which allows remote attackers to execute arbitrary code via a session on port 81.

References

20180813 [CONVISO-18-001] - Nasdaq BWise JMX/RMI RCE mailing-list