CVE-2016-1910

The User Management Engine (UME) in SAP NetWeaver 7.4 allows attackers to decrypt unspecified data via unknown vectors, aka SAP Security Note 2191290.

Score

CVSS 3.0 5.3 Medium

Status

Modified - cve@mitre.org

Published

2016-01-15

Last modified

2024-08-05

Weaknesses

CWE-200

Affected products

• Netweaver (Sap)

References

• http://seclists.org/fulldisclosure/2016/Apr/60
• http://www.securityfocus.com/bid/80920
• https://erpscan.io/advisories/erpscan-16-003-sap-netweaver-7-4-cryptographic-issues/
• https://erpscan.io/press-center/blog/sap-security-notes-january-2016-review/
• https://www.exploit-db.com/exploits/43495/