CVE-2015-2814

SAP EMR Unwired (com.sap.mobile.healthcare.emr.v2) and Clinical Task Tracker (com.sap.mobile.healthcare.ctt) does not properly restrict access, which allows remote attackers to change the backendurl, clientid, ssourl, and infopageurl settings via unspecified vectors, aka SAP Security Note 2117079.

Score

CVSS 2.0 6.4 Medium

Status

Modified - cve@mitre.org

Published

2015-04-01

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Clinical Task Tracker (Sap)
• Emr Unwired (Sap)

References

• http://www.securityfocus.com/bid/73701
• https://erpscan.io/advisories/erpscan-15-002-sap-mobile-healthcare-emr-v2-unauthorized-access/