CVE-2014-5174

The SAP Netweaver Business Warehouse component does not properly restrict access to the functions in the BW-SYS-DB-DB4 function group, which allows remote authenticated users to obtain sensitive information via unspecified vectors.

Date published : 2014-07-31

http://www.securityfocus.com/bid/68955

http://scn.sap.com/docs/DOC-8218