CVE-2014-6284
Last modified
CVE-2014-6284 is a vulnerability of currently unknown severity. SAP Adaptive Server Enterprise (ASE) before 15.7 SP132 and 16.0 before 16.0 SP01 allows remote attackers to bypass the challenge and response mechanism and obtain access to the probe account via a crafted response, aka SAP Security Note 2113995.. EPSS estimates a 1.82% chance of exploitation in the next 30 days.
Description
SAP Adaptive Server Enterprise (ASE) before 15.7 SP132 and 16.0 before 16.0 SP01 allows remote attackers to bypass the challenge and response mechanism and obtain access to the probe account via a crafted response, aka SAP Security Note 2113995.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Sybase | Adaptive Server Enterprise | <= 15.7 | Sp131 |
| Sybase | Adaptive Server Enterprise | 16.0 | — |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2014-6284?
How severe is CVE-2014-6284?
How do I fix CVE-2014-6284?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2014
- CVE-2014-6276schema.py in Roundup before 1.5.1 does not properly limit at…
- CVE-2014-6277GNU Bash through 4.3 bash43-026 does not properly parse func…
- CVE-2014-62771Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2014-6278GNU Bash through 4.3 bash43-026 does not properly parse func…8.8
- CVE-2014-6280Multiple cross-site scripting (XSS) vulnerabilities in OSCla…
- CVE-2014-6283SAP Adaptive Server Enterprise (ASE) 15.7 before SP122 or SP…
- CVE-2014-6287The findMacroMarker function in parserLib.pas in Rejetto HTT…9.8
- CVE-2014-6288The powermail extension 2.x before 2.0.11 for TYPO3 allows r…
- CVE-2014-6289The Ajax dispatcher for Extbase in the Yet Another Gallery (…
- CVE-2014-6290The News (tt_news) extension before 3.5.2 for TYPO3 allows r…
- CVE-2014-6291Cross-site scripting (XSS) vulnerability in the Alphabetic S…
- CVE-2014-6292The femanager extension before 1.0.9 for TYPO3 allows remote…
Are you affected by CVE-2014-6284?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST