CVE-2017-5372

The function msp (aka MSPRuntimeInterface) in the P4 SERVERCORE component in SAP AS JAVA allows remote attackers to obtain sensitive system information by…

published January 23, 2017

CVSS
—
EPSS
4%
Percentile
89.3
In the wild
Unconfirmed
What it is

The function msp (aka MSPRuntimeInterface) in the P4 SERVERCORE component in SAP AS JAVA allows remote attackers to obtain sensitive system information by leveraging a missing authorization check for the (1) getInformation, (2) getParameters, (3) getServiceInfo, (4) getStatistic, or (5) getClientStatistic function, aka SAP Security Note 2331908.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03591 · 89.3th percentile
Published
2017-01-23T21:00Z
EPSS history
Timeline
  • 23 JAN 21:00Z
    The function msp (aka MSPRuntimeInterface) in the P4 SERVERCORE component in SAP AS JAVA allows remote attackers to obtain sensitive system information by…
    cvelistv5