Vulnerability Details CVE-2013-6859
SAP Sybase Adaptive Server Enterprise (ASE) before 15.0.3 ESD#4.3. 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 does not properly perform authorization, which allows remote authenticated users to gain privileges via unspecified vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 68.9%
CVSS Severity
CVSS v2 Score 8.5
References
- http://scn.sap.com/docs/DOC-8218
- http://secunia.com/advisories/55537
- http://www.sybase.com/detail?id=1099371
- https://service.sap.com/sap/support/notes/1849356
- http://scn.sap.com/docs/DOC-8218
- http://secunia.com/advisories/55537
- http://www.sybase.com/detail?id=1099371
- https://service.sap.com/sap/support/notes/1849356
Products affected by CVE-2013-6859
-
cpe:2.3:a:sybase:adaptive_server_enterprise:15.0.3
-
cpe:2.3:a:sybase:adaptive_server_enterprise:15.5
-
cpe:2.3:a:sybase:adaptive_server_enterprise:15.7