« Volver al listado

CVE-2015-3978

Estado: ModificadaBaja (2.1)—

SAP Sybase Unwired Platform Online Data Proxy permite a usuarios locales obtener nombres de usuarios y contraseñas a través de DataVault, también conocido como la nota de seguridad de SAP 2094830.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

SAP — Sybase Unwired Platform Online Data Proxy

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2015-3978",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 2.1,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2015-05-12T20:59:00.113",
  "references": [
    {
      "url": "http://www.onapsis.com/blog/analyzing-sap-security-notes-april-2015-edition/",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/74625",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securitytracker.com/id/1032310",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://erpscan.io/press-center/blog/sap-security-notes-april-2015/",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.onapsis.com/blog/analyzing-sap-security-notes-april-2015-edition/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/74625",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1032310",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://erpscan.io/press-center/blog/sap-security-notes-april-2015/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "SAP Sybase Unwired Platform Online Data Proxy allows local users to obtain usernames and passwords via the DataVault, aka SAP Security Note 2094830."
    },
    {
      "lang": "es",
      "value": "SAP Sybase Unwired Platform Online Data Proxy permite a usuarios locales obtener nombres de usuarios y contraseñas a través de DataVault, también conocido como la nota de seguridad de SAP 2094830."
    }
  ],
  "lastModified": "2026-06-17T00:26:34.570",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:sap:sybase_unwired_platform_online_data_proxy:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E5B8B005-72A7-40ED-9FDD-247606A8CBAA"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}