CVE-2015-8600

High

Published: 17/12/2015(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The SysAdminWebTool servlets in SAP Mobile Platform allow remote attackers to bypass authentication, enabling them to obtain sensitive information, gain privileges, or have unspecified other impacts.

Risk Assessment

Attackers can exploit this vulnerability to access sensitive data and escalate their privileges, posing a significant security threat to the organization.

Recommendation

It is recommended to update to the latest version of SAP Mobile Platform and implement additional security measures to protect against unauthorized access.

Other vulnerabilities in SAP Mobile Platform

CVE-2015-5068High
The XXE vulnerability in SAP Mobile Platform 3 allows remote attackers to read arbitrary files or possibly have other unspecified impact via a crafted XML request.

Original NVD description (English source)

The SysAdminWebTool servlets in SAP Mobile Platform allow remote attackers to bypass authentication and obtain sensitive information, gain privileges, or have unspecified other impact via unknown vectors, aka SAP Security Note 2227855.