CVE-2006-6010

SAP allows remote attackers to obtain potentially sensitive information such as operating system and SAP version via an RFC_SYSTEM_INFO RfcCallReceive request, a different vulnerability than CVE-2003-0747.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

13.92% chance of exploitation in the next 30 days, 96th percentile

Published

2006-11-21

Updated

2024-08-07

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/sap/sap_soap_rfc_system…

References

• CVE Record
• NVD entry

Related

• CVE-2006-6007
• CVE-2006-6015
• CVE-2006-5987
• CVE-2006-6016
• CVE-2006-5983
• CVE-2006-6017