Vulnerability in Sap Commoncryptolib
CVE-2014-8587
SAPCRYPTOLIB before 5.555.38, SAPSECULIB, and CommonCryptoLib before 8.4.30, as used in SAP NetWeaver AS for ABAP and SAP HANA, allows remote attackers to spoof Digital Signature Algorithm (DSA) signatures via unspecified vectors.
Vulnerability class: POODLE (CVE-2014-3566)
EPSS: 0.013 (66.9th percentile) — read the EPSS interpretation.
Affected products
- Sap Commoncryptolib
- Sap Hana
- Sap Netweaver
- Sap Sapcryptolib
- Sap Sapseculib
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Permissions Required, x_refsource_CONFIRM)
- cve@mitre.org (x_refsource_MISC, Broken Link)
- cve@mitre.org (x_refsource_CONFIRM, Broken Link)
- cve@mitre.org (x_refsource_SECUNIA, Not Applicable, third-party-advisory)