CVE-2014-8587 | BDVDB-2026-66015 Detail

Description#

SAPCRYPTOLIB before 5.555.38, SAPSECULIB, and CommonCryptoLib before 8.4.30, as used in SAP NetWeaver AS for ABAP and SAP HANA, allows remote attackers to spoof Digital Signature Algorithm (DSA) signatures via unspecified vectors.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://service.sap.com/sap/support/notes/2067859
http://blog.onapsis.com/sap-security-note-2067859-potential-exposure-to-digital-signature-spoofing/
https://twitter.com/SAP_Gsupport/status/522401681997570048
http://secunia.com/advisories/57606

Exploit#

No public exploit known

History#

Version 12014-11-04Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.