ID de Prueba:	1.3.6.1.4.1.25623.1.0.106149
Categoría:	Web Servers
Título:	SAP NetWeaver AS Java Information Disclosure Vulnerability (2255990) - Active Check
Resumen:	SAP NetWeaver Application Server (AS) Java is prone to an; information disclosure vulnerability.
Descripción:	Summary: SAP NetWeaver Application Server (AS) Java is prone to an information disclosure vulnerability. Vulnerability Insight: The chat feature in the Real-Time Collaboration (RTC) services allows remote attackers to obtain sensitive user information. Vulnerability Impact: An unauthenticated attacker can get information about SAP NetWeaver AS Java users. Affected Software/OS: SAP NetWeaver AS Java version 7.10 (7.1) through 7.50 (7.5). Solution: See the referenced vendor advisories for a solution. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2016-3973 http://seclists.org/fulldisclosure/2016/Jun/46 http://packetstormsecurity.com/files/137579/SAP-NetWeaver-AS-JAVA-7.5-Information-Disclosure.html https://erpscan.io/advisories/erpscan-16-016-sap-netweaver-7-4-information-disclosure-wd_chat/ https://erpscan.io/press-center/blog/sap-security-notes-march-2016-review/
Copyright	Copyright (C) 2016 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.