Vulnerability Details CVE-2015-7991
The Web Dispatcher service in SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote attackers to read web dispatcher and security trace files and possibly obtain passwords via unspecified vectors, aka SAP Security Note 2148854.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 43.8%
CVSS Severity
CVSS v2 Score 5.0
References
- http://packetstormsecurity.com/files/134283/SAP-HANA-Remote-Trace-Disclosure.html
- http://seclists.org/fulldisclosure/2015/Nov/37
- http://www.onapsis.com/research/security-advisories/SAP_HANA_Remote_Trace_Disclosure
- http://packetstormsecurity.com/files/134283/SAP-HANA-Remote-Trace-Disclosure.html
- http://seclists.org/fulldisclosure/2015/Nov/37
- http://www.onapsis.com/research/security-advisories/SAP_HANA_Remote_Trace_Disclosure