CVE-2015-8600

EUVD-2015-8478
The SysAdminWebTool servlets in SAP Mobile Platform allow remote attackers to bypass authentication and obtain sensitive information, gain privileges, or have unspecified other impact via unknown vectors, aka SAP Security Note 2227855.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 54%
Affected Products (NVD)
VendorProductVersion
sapmobile_platform
*
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://scn.sap.com/community/security/blog/2015/12/09/sap-security-notes-december-2015--review
https://erpscan.io/advisories/10761/
http://scn.sap.com/community/security/blog/2015/12/09/sap-security-notes-december-2015--review
https://erpscan.io/advisories/10761/