CVE Catalog
CVE-2017-15295
CriticalSummary
Xpress Server in SAP POS does not require authentication for read/write/delete file access. This poses a serious security risk to data.
Risk Assessment
The lack of authentication may lead to unauthorized access to sensitive data, increasing the risk of information leaks and attacks on the system.
Recommendation
It is recommended to implement authentication mechanisms for file access and to monitor and audit access to the Xpress server.
Original NVD description (English source)
Xpress Server in SAP POS does not require authentication for read/write/delete file access. This is SAP Security Note 2520064.