CVE-2014-6284

High

Published: 08/06/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

SAP Adaptive Server Enterprise (ASE) before version 15.7 SP132 and 16.0 before version 16.0 SP01 allows remote attackers to bypass the challenge and response mechanism, enabling access to the probe account via a crafted response.

Risk Assessment

Attackers may gain unauthorized access to sensitive data, potentially leading to serious security breaches within the organization.

Recommendation

It is recommended to update SAP ASE to the latest version to mitigate these security vulnerabilities.

Other vulnerabilities in SAP Adaptive Server Enterprise (ASE)

CVE-2017-5371High
Odata Server in SAP Adaptive Server Enterprise (ASE) 16 allows remote attackers to cause a denial of service (process crash) via a series of crafted requests.

Original NVD description (English source)

SAP Adaptive Server Enterprise (ASE) before 15.7 SP132 and 16.0 before 16.0 SP01 allows remote attackers to bypass the challenge and response mechanism and obtain access to the probe account via a crafted response, aka SAP Security Note 2113995.