CVE-2013-3063 - SAP BASIS Communication Services 4.6B through 7.30 allows remote authenticated users to execute arbi

CVE-2013-3063

Summary

SAP BASIS Communication Services 4.6B through 7.30 allows remote authenticated users to execute arbitrary commands via unspecified vectors.

References

Vulnerable Configurations

cpe:2.3:a:sap:basis_communication_services:4.6:b:*:*:*:*:*:*
cpe:2.3:a:sap:basis_communication_services:4.6:b:*:*:*:*:*:*
cpe:2.3:a:sap:basis_communication_services:7.30:*:*:*:*:*:*:*
cpe:2.3:a:sap:basis_communication_services:7.30:*:*:*:*:*:*:*

CVSS

CWE

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	SINGLE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:M/Au:S/C:P/I:P/A:P

refmap via4

bugtraq	20130416 [ESNC-2013-003] Remote OS Command Execution in SAP BASIS Communication Services
confirm	http://scn.sap.com/docs/DOC-8218
misc	http://www.esnc.de/sap-security-audit-and-scan-services/security-advisories/39-remote-code-execution-in-sap-connect-communication-services https://service.sap.com/sap/support/notes/1674132

Last major update

19-11-2013 - 04:48

Published

01-05-2013 - 12:00

Last modified

19-11-2013 - 04:48