The Web Database Manager in web-tools for SAP DB before 7.4.03.30 generates predictable session IDs, which allows remote attackers to conduct unauthorized activities.
References
Link | Resource |
---|---|
http://www.atstake.com/research/advisories/2003/a111703-2.txt | Exploit Vendor Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/13774 |
Configurations
Information
Published : 2003-12-14 21:00
Updated : 2017-07-10 18:29
NVD link : CVE-2003-0945
Mitre link : CVE-2003-0945
JSON object : View
CWE
Products Affected
sap
- sap_db