CVE-2015-2816

Description

References

• packetstormsecurity.com/files/132363/SAP-Afaria-7-Missing-Authorization-Check.html
• seclists.org/fulldisclosure/2015/Jun/67
• securityfocus.com/archive/1/535830/100/800/threaded
• securityfocus.com/bid/73708
• erpscan.io/advisories/erpscan-15-009-sap-afaria-7-xclistener-missing-authorization-check

More vulnerabilities in afaria

• CVE-2015-8753CRITICAL 9.1SAP Afaria 7.0.6001.5 allows remote attackers to bypass authorization checks and wipe or lock mobile devices via a crafted request, related …
• CVE-2015-6663MEDIUM 4.3Cross-site scripting (XSS) vulnerability in the Client form in the Device Inspector page in SAP Afaria 7 allows remote attackers to inject a…
• CVE-2015-3449HIGH 7.2The Windows client in SAP Afaria 7.0.6398.0 uses weak permissions (Everyone: read and Everyone: write) for the install folder, which allows …
• CVE-2015-4092HIGH 7.5Buffer overflow in the XComms process in SAP Afaria 7.00.6620.2 SP5 allows remote attackers to cause a denial of service (crash) or possibly…
• CVE-2015-2820MEDIUM 5.0Buffer overflow in XcListener in SAP Afaria 7.0.6001.5 allows remote attackers to cause a denial of service (process termination) via a craf…