ID CVE-2012-1291
Summary Unspecified vulnerability in the com.sap.aii.mdt.amt.web.AMTPageProcessor servlet in SAP NetWeaver 7.0 allows remote attackers to obtain sensitive information about the Adapter Monitor via unspecified vectors, possibly related to the EnableInvokerServletGlobally property in the servlet_jsp service.
References
Vulnerable Configurations
  • cpe:2.3:a:sap:netweaver:7.0:*:*:*:*:*:*:*
    cpe:2.3:a:sap:netweaver:7.0:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 24-02-2012 - 05:00)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:N/A:N
refmap via4
bid 52101
confirm http://www.sdn.sap.com/irj/sdn/index?rid=/webcontent/uuid/c05604f6-4eb3-2d10-eea7-ceb666083a6a
misc
secunia 47861
Last major update 24-02-2012 - 05:00
Published 23-02-2012 - 20:07
Last modified 24-02-2012 - 05:00
Back to Top