cve/2013/CVE-2013-3319.md

CVE-2013-3319

Description

The GetComputerSystem method in the HostControl service in SAP Netweaver 7.03 allows remote attackers to obtain sensitive information via a crafted SOAP request to TCP port 1128.

POC

Reference

• http://labs.integrity.pt/advisories/cve-2013-3319/
• http://labs.integrity.pt/advisories/cve-2013-3319/

Github

• https://github.com/devoteam-cybertrust/cve-2013-3319
• https://github.com/integrity-sa/cve-2013-3319