Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2013-7363

Overview

Vulnerability Score 7.5 7.5
CVE Id CVE-2013-7363
Last Modified 11 Apr 2014 01:09:40
Published 10 Apr 2014 04:55:06
Confidentiality Impact PARTIAL PARTIAL
Integrity Impact PARTIAL PARTIAL
Availability Impact PARTIAL PARTIAL
Access Vector NETWORK
Access Complexity LOW
Authentication NONE

CVE-2013-7363

Summary

Unspecified vulnerability in the Diagnostics (SMD) agent in SAP Solution Manager allows remote attackers to obtain sensitive information, modify the configuration of applications, and install or remove applications via vectors involving the P4 protocol.

Vulnerable Systems

Application

  • Sap Solution Manager -


References

MISC - https://service.sap.com/sap/support/notes/1774568

MISC - http://www.onapsis.com/research-advisories.php

MISC - http://www.onapsis.com/get.php?resid=adv_onapsis-2013-006

CONFIRM - http://scn.sap.com/docs/DOC-8218

BUGTRAQ - 20130222 [Onapsis Security Advisory 2013-006] SAP SMD Agent Code Injection


Last Updated: 27 May 2016 11:04:54