Vulnerability Details CVE-2015-7991
The Web Dispatcher service in SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote attackers to read web dispatcher and security trace files and possibly obtain passwords via unspecified vectors, aka SAP Security Note 2148854.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.018
EPSS Ranking 75.9%
CVSS Severity
CVSS v2 Score 5.0
References
- http://packetstormsecurity.com/files/134283/SAP-HANA-Remote-Trace-Disclosure.html
- http://seclists.org/fulldisclosure/2015/Nov/37
- http://www.onapsis.com/research/security-advisories/SAP_HANA_Remote_Trace_Disclosure
- http://packetstormsecurity.com/files/134283/SAP-HANA-Remote-Trace-Disclosure.html
- http://seclists.org/fulldisclosure/2015/Nov/37
- http://www.onapsis.com/research/security-advisories/SAP_HANA_Remote_Trace_Disclosure