CVE-2015-8753

9.1CRITICAL

Key Information:

Vendor
SAP
Status
Afaria
Vendor
CVE Published:
8 January 2016

Summary

SAP Afaria 7.0.6001.5 allows remote attackers to bypass authorization checks and wipe or lock mobile devices via a crafted request, related to "Insecure signature," aka SAP Security Note 2134905.

References

https://erpscan.io/advisories/erpscan-15-023-sap-afaria-a...
x_refsource_MISC

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.