CVE-2019-0248

Опубликовано: 08 янв. 2019

Источник: nvd

CVSS3: 5.9

CVSS2: 4.3

EPSS Низкий

Описание

Under certain conditions SAP Gateway of ABAP Application Server (fixed in SAP_GWFND 7.5, 7.51, 7.52, 7.53; SAP_BASIS 7.5) allows an attacker to access information which would otherwise be restricted.

Ссылки

http://www.securityfocus.com/bid/106471
Third Party Advisory
VDB Entry
https://launchpad.support.sap.com/#/notes/2723142
Permissions Required
Vendor Advisory
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=509151985
Vendor Advisory
http://www.securityfocus.com/bid/106471
Third Party Advisory
VDB Entry
https://launchpad.support.sap.com/#/notes/2723142
Permissions Required
Vendor Advisory
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=509151985
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:sap:netweaver:7.5:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver:7.51:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver:7.52:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver:7.53:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:a:sap:basis:7.5:*:*:*:*:*:*:*

EPSS

Процентиль: 58%

0.00365

Низкий

5.9 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-x7v6-r6c2-98v3