Unrestricted Access to Federation Configuration Pages in SAP Enterprise Portal

Unrestricted Access to Federation Configuration Pages in SAP Enterprise Portal

CVE-2013-7367 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

SAP Enterprise Portal does not properly restrict access to the Federation configuration pages, which allows remote attackers to gain privileges via unspecified vectors.

Learn more about our Web Application Penetration Testing UK.