CVE-2015-2816
HighSummary
The XcListener in SAP Afaria 7.0.6001.5 does not properly restrict access, allowing remote attackers to have unspecified impact via a crafted request.
Risk Assessment
The lack of proper access restrictions may lead to unauthorized access to the system, posing a serious threat to the organization's data security.
Recommendation
It is recommended to update to the latest version of SAP Afaria and implement appropriate access control mechanisms.
Other vulnerabilities in SAP Afaria 7.0.6001.5
See all- CVE-2015-3449High
The Windows client in SAP Afaria 7.0.6398.0 uses weak permissions (Everyone: read and Everyone: write) for the install folder, allowing local users to gain privileges via a Trojan horse XeService.exe file.
- CVE-2015-4161High
SAP Afaria does not properly restrict access to unspecified functionality, allowing remote attackers to obtain sensitive information, gain privileges, or have other unspecified impact.
- CVE-2015-8753Critical
SAP Afaria version 7.0.6001.5 allows remote attackers to bypass authorization checks and wipe or lock mobile devices via a crafted request, related to 'Insecure signature.'
Original NVD description (English source)
The XcListener in SAP Afaria 7.0.6001.5 does not properly restrict access, which allows remote attackers to have unspecified impact via a crafted request, aka SAP Security Note 2134905.