Search

Find a vulnerability

Search criteria

    2 vulnerabilities found for background_processing by sap

    CVE-2014-3132 (GCVE-0-2014-3132)

    Vulnerability from nvd – Published: 2014-04-30 14:00 – Updated: 2024-08-06 10:35
    VLAI
    Summary
    SAP Background Processing does not properly restrict access, which allows remote authenticated users to obtain sensitive information via an unspecified RFC function, related to SAP Solution Manager 7.1.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    Date Public
    2014-04-28 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-06T10:35:56.658Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "20140428 [Onapsis Security Advisory 2014-006] Missing authorization check in SAP Background Processing RFC",
                "tags": [
                  "mailing-list",
                  "x_refsource_FULLDISC",
                  "x_transferred"
                ],
                "url": "http://seclists.org/fulldisclosure/2014/Apr/299"
              },
              {
                "name": "67107",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/67107"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "https://service.sap.com/sap/support/notes/1918333"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://scn.sap.com/docs/DOC-8218"
              },
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-006"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2014-04-28T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "SAP Background Processing does not properly restrict access, which allows remote authenticated users to obtain sensitive information via an unspecified RFC function, related to SAP Solution Manager 7.1."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2014-05-05T16:57:00.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "20140428 [Onapsis Security Advisory 2014-006] Missing authorization check in SAP Background Processing RFC",
              "tags": [
                "mailing-list",
                "x_refsource_FULLDISC"
              ],
              "url": "http://seclists.org/fulldisclosure/2014/Apr/299"
            },
            {
              "name": "67107",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/67107"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://service.sap.com/sap/support/notes/1918333"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://scn.sap.com/docs/DOC-8218"
            },
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-006"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2014-3132",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "SAP Background Processing does not properly restrict access, which allows remote authenticated users to obtain sensitive information via an unspecified RFC function, related to SAP Solution Manager 7.1."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "20140428 [Onapsis Security Advisory 2014-006] Missing authorization check in SAP Background Processing RFC",
                  "refsource": "FULLDISC",
                  "url": "http://seclists.org/fulldisclosure/2014/Apr/299"
                },
                {
                  "name": "67107",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/67107"
                },
                {
                  "name": "https://service.sap.com/sap/support/notes/1918333",
                  "refsource": "CONFIRM",
                  "url": "https://service.sap.com/sap/support/notes/1918333"
                },
                {
                  "name": "http://scn.sap.com/docs/DOC-8218",
                  "refsource": "CONFIRM",
                  "url": "http://scn.sap.com/docs/DOC-8218"
                },
                {
                  "name": "http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-006",
                  "refsource": "MISC",
                  "url": "http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-006"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2014-3132",
        "datePublished": "2014-04-30T14:00:00.000Z",
        "dateReserved": "2014-04-30T00:00:00.000Z",
        "dateUpdated": "2024-08-06T10:35:56.658Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2014-3132 (GCVE-0-2014-3132)

    Vulnerability from cvelistv5 – Published: 2014-04-30 14:00 – Updated: 2024-08-06 10:35
    VLAI
    Summary
    SAP Background Processing does not properly restrict access, which allows remote authenticated users to obtain sensitive information via an unspecified RFC function, related to SAP Solution Manager 7.1.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    Date Public
    2014-04-28 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-06T10:35:56.658Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "20140428 [Onapsis Security Advisory 2014-006] Missing authorization check in SAP Background Processing RFC",
                "tags": [
                  "mailing-list",
                  "x_refsource_FULLDISC",
                  "x_transferred"
                ],
                "url": "http://seclists.org/fulldisclosure/2014/Apr/299"
              },
              {
                "name": "67107",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/67107"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "https://service.sap.com/sap/support/notes/1918333"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://scn.sap.com/docs/DOC-8218"
              },
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-006"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2014-04-28T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "SAP Background Processing does not properly restrict access, which allows remote authenticated users to obtain sensitive information via an unspecified RFC function, related to SAP Solution Manager 7.1."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2014-05-05T16:57:00.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "20140428 [Onapsis Security Advisory 2014-006] Missing authorization check in SAP Background Processing RFC",
              "tags": [
                "mailing-list",
                "x_refsource_FULLDISC"
              ],
              "url": "http://seclists.org/fulldisclosure/2014/Apr/299"
            },
            {
              "name": "67107",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/67107"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://service.sap.com/sap/support/notes/1918333"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://scn.sap.com/docs/DOC-8218"
            },
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-006"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2014-3132",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "SAP Background Processing does not properly restrict access, which allows remote authenticated users to obtain sensitive information via an unspecified RFC function, related to SAP Solution Manager 7.1."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "20140428 [Onapsis Security Advisory 2014-006] Missing authorization check in SAP Background Processing RFC",
                  "refsource": "FULLDISC",
                  "url": "http://seclists.org/fulldisclosure/2014/Apr/299"
                },
                {
                  "name": "67107",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/67107"
                },
                {
                  "name": "https://service.sap.com/sap/support/notes/1918333",
                  "refsource": "CONFIRM",
                  "url": "https://service.sap.com/sap/support/notes/1918333"
                },
                {
                  "name": "http://scn.sap.com/docs/DOC-8218",
                  "refsource": "CONFIRM",
                  "url": "http://scn.sap.com/docs/DOC-8218"
                },
                {
                  "name": "http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-006",
                  "refsource": "MISC",
                  "url": "http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-006"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2014-3132",
        "datePublished": "2014-04-30T14:00:00.000Z",
        "dateReserved": "2014-04-30T00:00:00.000Z",
        "dateUpdated": "2024-08-06T10:35:56.658Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }