CVE-2019-0293

Опубликовано: 14 мая 2019

Источник: nvd

CVSS3: 6.5

CVSS2: 4

EPSS Низкий

Описание

Read of RFC destination does not always perform necessary authorization checks, resulting in escalation of privileges to access information on RFC destinations on managed systems and SAP Solution Manager system (ST-PI, before versions 2008_1_700, 2008_1_710, and 740).

Ссылки

http://www.securityfocus.com/bid/108324
Third Party Advisory
VDB Entry
https://launchpad.support.sap.com/#/notes/2756625
Permissions Required
Vendor Advisory
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=520259032
Vendor Advisory
http://www.securityfocus.com/bid/108324
Third Party Advisory
VDB Entry
https://launchpad.support.sap.com/#/notes/2756625
Permissions Required
Vendor Advisory
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=520259032
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:sap:sap_solution_manager_system:2008_1_700:*:*:*:*:*:*:*

cpe:2.3:a:sap:sap_solution_manager_system:2008_1_710:*:*:*:*:*:*:*

cpe:2.3:a:sap:sap_solution_manager_system:2008_1_740:*:*:*:*:*:*:*

EPSS

Процентиль: 44%

0.0022

Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-862

Связанные уязвимости

GHSA-mfmp-hpg9-83ch