cve/2016/CVE-2016-10005.md

CVE-2016-10005

Description

Webdynpro in SAP Solman 7.1 through 7.31 allows remote attackers to obtain sensitive information via webdynpro/dispatcher/sap.com/cafeugpexampletimeoff~wd requests, aka SAP Security Note 2344524.

POC

Reference

• http://packetstormsecurity.com/files/140232/SAP-Solman-7.31-Information-Disclosure.html
• http://seclists.org/fulldisclosure/2016/Dec/69
• https://erpscan.io/advisories/erpscan-16-035-sap-solman-user-accounts-dislosure/

Github

• https://github.com/ARPSyndicate/cvemon