SAP Netweaver 7.40 improperly logs (1) DUI and (2) DUJ events in the SAP Security Audit Log as non-critical, which might allow local users to hide rejected attempts to execute RFC function callbacks by leveraging filtering of non-critical events in audit analysis reports, aka SAP Security Note 2252312.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2016-10-13T14:00:00
Updated: 2024-08-06T01:57:47.627Z
Reserved: 2016-09-09T00:00:00
Link: CVE-2016-7437
Vulnrichment
No data.
NVD
Status : Modified
Published: 2016-10-13T14:59:12.237
Modified: 2024-11-21T02:58:00.530
Link: CVE-2016-7437
Redhat
No data.