CVE-2015-8753
CriticalSummary
SAP Afaria version 7.0.6001.5 allows remote attackers to bypass authorization checks and wipe or lock mobile devices via a crafted request, related to 'Insecure signature.'
Risk Assessment
The organization may be exposed to data loss and control over mobile devices, potentially leading to serious security incidents.
Recommendation
It is recommended to update SAP Afaria to the latest version and implement additional security measures to protect against unauthorized access.
Other vulnerabilities in SAP Afaria 7.0.6001.5
See all- CVE-2015-3449High
The Windows client in SAP Afaria 7.0.6398.0 uses weak permissions (Everyone: read and Everyone: write) for the install folder, allowing local users to gain privileges via a Trojan horse XeService.exe file.
- CVE-2015-4161High
SAP Afaria does not properly restrict access to unspecified functionality, allowing remote attackers to obtain sensitive information, gain privileges, or have other unspecified impact.
- CVE-2015-2816High
The XcListener in SAP Afaria 7.0.6001.5 does not properly restrict access, allowing remote attackers to have unspecified impact via a crafted request.
Original NVD description (English source)
SAP Afaria 7.0.6001.5 allows remote attackers to bypass authorization checks and wipe or lock mobile devices via a crafted request, related to "Insecure signature," aka SAP Security Note 2134905.