var-201404-0501
Vulnerability from variot
The passwordCheck function in SAP Router 721 patch 117, 720 patch 411, 710 patch 029, and earlier terminates validation of a Route Permission Table entry password upon encountering the first incorrect character, which allows remote attackers to obtain passwords via a brute-force attack that relies on timing differences in responses to incorrect password guesses, aka a timing side-channel attack. SAProuter is an SAP program that protects your SAP network from unauthorized access behavior. There is an information disclosure vulnerability in SAProuter. Allows an attacker to recover the privilege password of the plaintext routing table by exploiting a timed attack. SAProuter is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. There is a security vulnerability in the 'passwordCheck' function of SAP Router 721 patch 117, 720 patch 411 and 710 patch 029
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201404-0501",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "router",
"scope": "eq",
"trust": 1.6,
"vendor": "sap",
"version": "721"
},
{
"model": "router",
"scope": "eq",
"trust": 1.6,
"vendor": "sap",
"version": "720"
},
{
"model": "router",
"scope": "eq",
"trust": 1.6,
"vendor": "sap",
"version": "710"
},
{
"model": "network interface router",
"scope": "lte",
"trust": 0.8,
"vendor": "sap",
"version": "(saprouter) 710 patch 029"
},
{
"model": "network interface router",
"scope": "eq",
"trust": 0.8,
"vendor": "sap",
"version": "(saprouter) 720 patch 411"
},
{
"model": "network interface router",
"scope": "eq",
"trust": 0.8,
"vendor": "sap",
"version": "(saprouter) 721 patch 117"
},
{
"model": "saprouter patch level",
"scope": "eq",
"trust": 0.6,
"vendor": "sap",
"version": "721117"
},
{
"model": "saprouter patch level",
"scope": "eq",
"trust": 0.6,
"vendor": "sap",
"version": "720411"
},
{
"model": "saprouter patch level",
"scope": "eq",
"trust": 0.6,
"vendor": "sap",
"version": "710029"
},
{
"model": "saprouter release patch le",
"scope": "eq",
"trust": 0.3,
"vendor": "sap",
"version": "721"
},
{
"model": "saprouter release patch le",
"scope": "eq",
"trust": 0.3,
"vendor": "sap",
"version": "720"
},
{
"model": "saprouter release patch le",
"scope": "eq",
"trust": 0.3,
"vendor": "sap",
"version": "710"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "router",
"version": "710"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "router",
"version": "720"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "router",
"version": "721"
}
],
"sources": [
{
"db": "IVD",
"id": "7593d75a-1edc-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2014-02529"
},
{
"db": "BID",
"id": "66938"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-002173"
},
{
"db": "NVD",
"id": "CVE-2014-0984"
},
{
"db": "CNNVD",
"id": "CNNVD-201404-362"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:sap:router:721:117:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:sap:router:720:411:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:sap:router:710:029:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2014-0984"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Martin Gallo from Core Security Consulting Services",
"sources": [
{
"db": "BID",
"id": "66938"
}
],
"trust": 0.3
},
"cve": "CVE-2014-0984",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"acInsufInfo": false,
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "NVD",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.6,
"impactScore": 2.9,
"integrityImpact": "NONE",
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"trust": 1.0,
"userInteractionRequired": false,
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Medium",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 4.3,
"confidentialityImpact": "Partial",
"exploitabilityScore": null,
"id": "CVE-2014-0984",
"impactScore": null,
"integrityImpact": "None",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "Medium",
"trust": 0.9,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CNVD-2014-02529",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "7593d75a-1edc-11e6-abef-000c29c66e3d",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.2,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.9 [IVD]"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.6,
"id": "VHN-68477",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:N/AC:M/AU:N/C:P/I:N/A:N",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "NVD",
"id": "CVE-2014-0984",
"trust": 1.8,
"value": "MEDIUM"
},
{
"author": "CNVD",
"id": "CNVD-2014-02529",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201404-362",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "IVD",
"id": "7593d75a-1edc-11e6-abef-000c29c66e3d",
"trust": 0.2,
"value": "MEDIUM"
},
{
"author": "VULHUB",
"id": "VHN-68477",
"trust": 0.1,
"value": "MEDIUM"
},
{
"author": "VULMON",
"id": "CVE-2014-0984",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "IVD",
"id": "7593d75a-1edc-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2014-02529"
},
{
"db": "VULHUB",
"id": "VHN-68477"
},
{
"db": "VULMON",
"id": "CVE-2014-0984"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-002173"
},
{
"db": "NVD",
"id": "CVE-2014-0984"
},
{
"db": "CNNVD",
"id": "CNNVD-201404-362"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "The passwordCheck function in SAP Router 721 patch 117, 720 patch 411, 710 patch 029, and earlier terminates validation of a Route Permission Table entry password upon encountering the first incorrect character, which allows remote attackers to obtain passwords via a brute-force attack that relies on timing differences in responses to incorrect password guesses, aka a timing side-channel attack. SAProuter is an SAP program that protects your SAP network from unauthorized access behavior. There is an information disclosure vulnerability in SAProuter. Allows an attacker to recover the privilege password of the plaintext routing table by exploiting a timed attack. SAProuter is prone to an information-disclosure vulnerability. \nAttackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. There is a security vulnerability in the \u0027passwordCheck\u0027 function of SAP Router 721 patch 117, 720 patch 411 and 710 patch 029",
"sources": [
{
"db": "NVD",
"id": "CVE-2014-0984"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-002173"
},
{
"db": "CNVD",
"id": "CNVD-2014-02529"
},
{
"db": "BID",
"id": "66938"
},
{
"db": "IVD",
"id": "7593d75a-1edc-11e6-abef-000c29c66e3d"
},
{
"db": "VULHUB",
"id": "VHN-68477"
},
{
"db": "VULMON",
"id": "CVE-2014-0984"
}
],
"trust": 2.79
},
"exploit_availability": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"reference": "https://www.scap.org.cn/vuln/vhn-68477",
"trust": 0.1,
"type": "unknown"
},
{
"reference": "https://vulmon.com/exploitdetails?qidtp=exploitdb\u0026qid=32919",
"trust": 0.1,
"type": "exploit"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-68477"
},
{
"db": "VULMON",
"id": "CVE-2014-0984"
}
]
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2014-0984",
"trust": 3.7
},
{
"db": "SECUNIA",
"id": "57993",
"trust": 1.2
},
{
"db": "EXPLOIT-DB",
"id": "32919",
"trust": 1.2
},
{
"db": "BID",
"id": "66938",
"trust": 1.0
},
{
"db": "CNNVD",
"id": "CNNVD-201404-362",
"trust": 0.9
},
{
"db": "CNVD",
"id": "CNVD-2014-02529",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2014-002173",
"trust": 0.8
},
{
"db": "OSVDB",
"id": "105967",
"trust": 0.6
},
{
"db": "BUGTRAQ",
"id": "20140416 [CORE-2014-0003] - SAP ROUTER PASSWORD TIMING ATTACK",
"trust": 0.6
},
{
"db": "IVD",
"id": "7593D75A-1EDC-11E6-ABEF-000C29C66E3D",
"trust": 0.2
},
{
"db": "SEEBUG",
"id": "SSVID-86180",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "126194",
"trust": 0.1
},
{
"db": "VULHUB",
"id": "VHN-68477",
"trust": 0.1
},
{
"db": "VULMON",
"id": "CVE-2014-0984",
"trust": 0.1
}
],
"sources": [
{
"db": "IVD",
"id": "7593d75a-1edc-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2014-02529"
},
{
"db": "VULHUB",
"id": "VHN-68477"
},
{
"db": "VULMON",
"id": "CVE-2014-0984"
},
{
"db": "BID",
"id": "66938"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-002173"
},
{
"db": "NVD",
"id": "CVE-2014-0984"
},
{
"db": "CNNVD",
"id": "CNNVD-201404-362"
}
]
},
"id": "VAR-201404-0501",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "IVD",
"id": "7593d75a-1edc-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2014-02529"
},
{
"db": "VULHUB",
"id": "VHN-68477"
}
],
"trust": 1.9
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"ICS"
],
"sub_category": null,
"trust": 0.8
}
],
"sources": [
{
"db": "IVD",
"id": "7593d75a-1edc-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2014-02529"
}
]
},
"last_update_date": "2023-12-18T13:19:59.114000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "SAP Security Note 1986895",
"trust": 0.8,
"url": "http://scn.sap.com/docs/doc-8218"
},
{
"title": "Patch for SAProuter Information Disclosure Vulnerability",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchinfo/show/45053"
},
{
"title": "martingalloar",
"trust": 0.1,
"url": "https://github.com/martingalloar/martingalloar "
},
{
"title": "publications",
"trust": 0.1,
"url": "https://github.com/martingalloar/publications "
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2014-02529"
},
{
"db": "VULMON",
"id": "CVE-2014-0984"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-002173"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-264",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-68477"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-002173"
},
{
"db": "NVD",
"id": "CVE-2014-0984"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.6,
"url": "http://www.coresecurity.com/advisories/sap-router-password-timing-attack"
},
{
"trust": 1.8,
"url": "http://scn.sap.com/docs/doc-8218"
},
{
"trust": 1.8,
"url": "https://service.sap.com/sap/support/notes/1986895"
},
{
"trust": 1.2,
"url": "http://www.securityfocus.com/archive/1/531854/100/0/threaded"
},
{
"trust": 1.2,
"url": "http://www.exploit-db.com/exploits/32919"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2014-0984"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2014-0984"
},
{
"trust": 0.6,
"url": "http://secunia.com/advisories/57993/"
},
{
"trust": 0.6,
"url": "http://osvdb.com/show/osvdb/105967"
},
{
"trust": 0.6,
"url": "http://www.securityfocus.com/archive/1/archive/1/531854/100/0/threaded"
},
{
"trust": 0.6,
"url": "http://secunia.com/advisories/57993"
},
{
"trust": 0.1,
"url": "https://cwe.mitre.org/data/definitions/264.html"
},
{
"trust": 0.1,
"url": "http://tools.cisco.com/security/center/viewalert.x?alertid=33846"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov"
},
{
"trust": 0.1,
"url": "https://www.exploit-db.com/exploits/32919/"
},
{
"trust": 0.1,
"url": "https://github.com/martingalloar/martingalloar"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2014-02529"
},
{
"db": "VULHUB",
"id": "VHN-68477"
},
{
"db": "VULMON",
"id": "CVE-2014-0984"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-002173"
},
{
"db": "NVD",
"id": "CVE-2014-0984"
},
{
"db": "CNNVD",
"id": "CNNVD-201404-362"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "IVD",
"id": "7593d75a-1edc-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2014-02529"
},
{
"db": "VULHUB",
"id": "VHN-68477"
},
{
"db": "VULMON",
"id": "CVE-2014-0984"
},
{
"db": "BID",
"id": "66938"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-002173"
},
{
"db": "NVD",
"id": "CVE-2014-0984"
},
{
"db": "CNNVD",
"id": "CNNVD-201404-362"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2014-04-21T00:00:00",
"db": "IVD",
"id": "7593d75a-1edc-11e6-abef-000c29c66e3d"
},
{
"date": "2014-04-21T00:00:00",
"db": "CNVD",
"id": "CNVD-2014-02529"
},
{
"date": "2014-04-17T00:00:00",
"db": "VULHUB",
"id": "VHN-68477"
},
{
"date": "2014-04-17T00:00:00",
"db": "VULMON",
"id": "CVE-2014-0984"
},
{
"date": "2014-04-16T00:00:00",
"db": "BID",
"id": "66938"
},
{
"date": "2014-04-22T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2014-002173"
},
{
"date": "2014-04-17T14:55:08.857000",
"db": "NVD",
"id": "CVE-2014-0984"
},
{
"date": "2014-04-22T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201404-362"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2014-04-21T00:00:00",
"db": "CNVD",
"id": "CNVD-2014-02529"
},
{
"date": "2018-10-10T00:00:00",
"db": "VULHUB",
"id": "VHN-68477"
},
{
"date": "2018-10-10T00:00:00",
"db": "VULMON",
"id": "CVE-2014-0984"
},
{
"date": "2014-04-16T00:00:00",
"db": "BID",
"id": "66938"
},
{
"date": "2014-04-22T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2014-002173"
},
{
"date": "2018-10-10T21:29:00.337000",
"db": "NVD",
"id": "CVE-2014-0984"
},
{
"date": "2014-04-22T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201404-362"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201404-362"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "SAProuter Information Disclosure Vulnerability",
"sources": [
{
"db": "IVD",
"id": "7593d75a-1edc-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2014-02529"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "permissions and access control",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201404-362"
}
],
"trust": 0.6
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.