CVE-2013-7245

Published: Apr 24, 2018Modified: Nov 21, 2024

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

The Backup Server component in SAP Sybase ASE 15.7 before SP51 allows remote attackers to bypass access restrictions and perform database dumps by leveraging failure to validate credentials, aka SAP Security Note 1927859.

Affected (2)

Products: Sybase: Adaptive Server Enterprise

Sybase

1 product

Adaptive Server Enterprise

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Sybase Adaptive Server Enterprise	Version 15.7
Sybase Adaptive Server Enterprise	Version 15.7 sp50

Related CWEs

CWE-285

Improper Authorization

The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.

References (4)

http://blog.spiderlabs.com/2014/01/sap-sybase-ase-157-security-updates.html

Source: cve@mitre.org

Third Party Advisory

https://www3.trustwave.com/spiderlabs/advisories/TWSL2013-035.txt

Source: cve@mitre.org

Third Party Advisory

http://blog.spiderlabs.com/2014/01/sap-sybase-ase-157-security-updates.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www3.trustwave.com/spiderlabs/advisories/TWSL2013-035.txt

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.