CVE-2016-6146 The NameServer in SAP TREX 7.10 Revision 63 allows remote attackers to obtain sensitive TNS information via an unspecified query, aka SAP Security Note 2234226.
MediumCVSS 5.3
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The NameServer in SAP TREX 7.10 Revision 63 allows remote attackers to obtain sensitive TNS information via an unspecified query, aka SAP Security Note 2234226.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sap trex | = 7.10-revision_63 | No fix listed |
References
- onapsis.com permissions-required third-party-advisory
- packetstormsecurity.com third-party-advisory vdb-entry
- scn.sap.com vendor-advisory
- 20160819 Onapsis Security Advisory ONAPSIS-2016-033: SAP TREX TNS Information Disclosure in NameServer mailing-list third-party-advisory
- layersevensecurity.com third-party-advisory