CVE-2013-7363

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://service.sap.com/sap/support/notes/1774568", "name": "https://service.sap.com/sap/support/notes/1774568", "tags": [], "refsource": "MISC"}, {"url": "http://scn.sap.com/docs/DOC-8218", "name": "http://scn.sap.com/docs/DOC-8218", "tags": [], "refsource": "CONFIRM"}, {"url": "http://archives.neohapsis.com/archives/bugtraq/2013-02/0134.html", "name": "20130222 [Onapsis Security Advisory 2013-006] SAP SMD Agent Code Injection", "tags": [], "refsource": "BUGTRAQ"}, {"url": "http://www.onapsis.com/research-advisories.php", "name": "http://www.onapsis.com/research-advisories.php", "tags": [], "refsource": "MISC"}, {"url": "http://www.onapsis.com/get.php?resid=adv_onapsis-2013-006", "name": "http://www.onapsis.com/get.php?resid=adv_onapsis-2013-006", "tags": [], "refsource": "MISC"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Unspecified vulnerability in the Diagnostics (SMD) agent in SAP Solution Manager allows remote attackers to obtain sensitive information, modify the configuration of applications, and install or remove applications via vectors involving the P4 protocol."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2013-7363", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "severity": "HIGH", "impactScore": 6.4, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2014-04-10T20:55Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:sap:solution_manager:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2014-04-11T17:09Z"}