CVE-2015-1312

{"id": "CVE-2015-1312", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": true, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2015-01-22T16:59:08.620", "references": [{"url": "https://erpscan.io/press-center/blog/sap-critical-patch-update-january-2015/", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "The Dealer Portal in SAP ERP does not properly restrict access, which allows remote attackers to obtain sensitive information, gain privileges, and possibly have other unspecified impact via unknown vectors, aka SAP Note 2000401. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."}, {"lang": "es", "value": "El portal Dealer en SAP ERP no restringe correctamente el acceso, lo que permite a atacantes remotos obtener informaci\u00f3n sensible, ganar privilegios y posiblemente tener otro impacto no especificado a trav\u00e9s de vectores desconocidos, tambi\u00e9n conocido como SAP Nota 2000401. NOTA: la fuente de esta informaci\u00f3n se desconoce, los detalles se obtienen \u00fanicamente de informaci\u00f3n de terceras partes."}], "lastModified": "2018-12-10T19:29:06.890", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:sap:enterprise_resource_planning:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "92B6C514-251C-494C-95D7-6FA5E48A376C"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}