Security Advisory

CVE-2003-1035

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2004-03-16 05:00:00
Last updated 2024-08-08 02:12:35
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

The default installation of SAP R/3 46C/D allows remote attackers to bypass account locking by using the RFC API instead of the SAPGUI to conduct a brute force password guessing attack, which does not lock out the account like the SAPGUI does.