Question Re: Vulnerabilities in Technology Q&A https://community.sap.com/t5/technology-q-a/vulnerabilities/qaa-p/11665761#M4359558 <HTML><HEAD></HEAD><BODY><P>The web page at <A href="https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6868" title="https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6868"> NVD - Detail</A> specifies the affected versions.&nbsp; The solution would be to upgrade to a more recent rollup of whatever version of ASE you are running on.&nbsp;&nbsp; </P><P></P><P>-bret</P></BODY></HTML> Wed, 04 May 2016 21:58:13 GMT former_member188958 2016-05-04T21:58:13Z Vulnerabilities https://community.sap.com/t5/technology-q-a/vulnerabilities/qaq-p/11665760 <HTML><HEAD></HEAD><BODY><P><SPAN lang="en">I need to know about&nbsp; the solutions associated with the CVE - 2013-6868 vulnerability , related to ASE and its different versions.</SPAN></P></BODY></HTML> Tue, 03 May 2016 21:18:05 GMT https://community.sap.com/t5/technology-q-a/vulnerabilities/qaq-p/11665760 Former Member 2016-05-03T21:18:05Z Re: Vulnerabilities https://community.sap.com/t5/technology-q-a/vulnerabilities/qaa-p/11665761#M4359558 <HTML><HEAD></HEAD><BODY><P>The web page at <A href="https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6868" title="https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6868"> NVD - Detail</A> specifies the affected versions.&nbsp; The solution would be to upgrade to a more recent rollup of whatever version of ASE you are running on.&nbsp;&nbsp; </P><P></P><P>-bret</P></BODY></HTML> Wed, 04 May 2016 21:58:13 GMT https://community.sap.com/t5/technology-q-a/vulnerabilities/qaa-p/11665761#M4359558 former_member188958 2016-05-04T21:58:13Z Re: Vulnerabilities https://community.sap.com/t5/technology-q-a/vulnerabilities/qaa-p/11665762#M4359559 <HTML><HEAD></HEAD><BODY><P>Julio,</P><P></P><P>In other words, <SPAN style="color: #000154; font-family: Verdana, Geneva, Arial, helvetica, sans-serif; font-size: 12.24px; background-color: #f6f0d0;"> 15.0.3 before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows local users to obtain sensitive information via unspecified vectors.</SPAN></P><P></P><P>The specific vector in question, network vulnerability not requiring authentication... </P><P></P><P>So, apply the specific patches and / or upgrade to ASE 16.0 ASAP?</P><P></P><P>Cheers.</P><P></P><P>Jean-Pierre</P></BODY></HTML> Wed, 04 May 2016 23:29:35 GMT https://community.sap.com/t5/technology-q-a/vulnerabilities/qaa-p/11665762#M4359559 Former Member 2016-05-04T23:29:35Z