CVE-2003-1038

The AGate component for SAP Internet Transaction Server (ITS) allows remote attackers to obtain sensitive information via a ~command parameter with an AgateInstallCheck value, which provides a list of installed DLLs and full pathnames.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2004-04-15

Last modified

2024-08-08

Affected products

• Internet Transaction Server (Sap)

References

• http://www.phenoelit.de/stuff/Phenoelit20c3.pd
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15516