From 5326a39851ae556dbcae9a96325578cbafb82e59 Mon Sep 17 00:00:00 2001
From: MostInterestingBotInTheWorld
 <98333686+MostInterestingBotInTheWorld@users.noreply.github.com>
Date: Thu, 9 Jun 2022 12:04:23 -0400
Subject: [PATCH] Enhancement: cves/2016/CVE-2016-2389.yaml by mp

---
 cves/2016/CVE-2016-2389.yaml | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/cves/2016/CVE-2016-2389.yaml b/cves/2016/CVE-2016-2389.yaml
index 33b554b186..a9ca09b9d6 100644
--- a/cves/2016/CVE-2016-2389.yaml
+++ b/cves/2016/CVE-2016-2389.yaml
@@ -1,15 +1,16 @@
 id: CVE-2016-2389
 
 info:
-  name: SAP xMII 15.0 - Directory Traversal
+  name: SAP xMII 15.0 for SAP NetWeaver 7.4 - Local File Inclusion
   author: daffainfo
   severity: high
-  description: Directory traversal vulnerability in the GetFileList function in the SAP Manufacturing Integration and Intelligence (xMII) component 15.0 for SAP NetWeaver 7.4 allows remote attackers to read arbitrary files via a .. (dot dot) in the Path parameter to /Catalog, aka SAP Security Note 2230978.
+  description: SAP xMII 15.0 for SAP NetWeaver 7.4 is susceptible to a local file inclusion vulnerability in the GetFileList function which allows remote attackers to read arbitrary files via a .. (dot dot) in the path parameter to /Catalog, aka SAP Security Note 2230978.
   reference:
     - https://erpscan.io/advisories/erpscan-16-009-sap-xmii-directory-traversal-vulnerability/
     - https://www.cvedetails.com/cve/CVE-2016-2389
     - http://packetstormsecurity.com/files/137046/SAP-MII-15.0-Directory-Traversal.html
     - https://www.exploit-db.com/exploits/39837/
+    - https://nvd.nist.gov/vuln/detail/CVE-2016-2389
   classification:
     cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
     cvss-score: 7.5
@@ -32,3 +33,5 @@ requests:
       - type: status
         status:
           - 200
+
+# Enhanced by mp on 2022/06/09