CVE-2014-5174

Currently unrated

Key Information:

Vendor
SAP
Status
Netweaver Business Warehouse
Vendor
CVE Published:
31 July 2014

Summary

The SAP Netweaver Business Warehouse component does not properly restrict access to the functions in the BW-SYS-DB-DB4 function group, which allows remote authenticated users to obtain sensitive information via unspecified vectors.

References

http://www.onapsis.com/resources/get.php?resid=adv_onapsi...
x_refsource_MISC
https://exchange.xforce.ibmcloud.com/vulnerabilities/94921
vdb-entryx_refsource_XF
http://scn.sap.com/docs/DOC-8218
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.