Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-0312

Опубликовано: 12 июн. 2019
Источник: nvd
CVSS3: 5.3
CVSS2: 5
EPSS Низкий

Описание

Several web pages provided SAP NetWeaver Process Integration (versions: SAP_XIESR: 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50 and SAP_XITOOL: 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50) are not password protected. An attacker could access landscape information like host names, ports or other technical data in the absence of restrictive firewall and port settings.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:sap:netweaver_process_integration:7.10:*:*:*:*:*:*:*
cpe:2.3:a:sap:netweaver_process_integration:7.11:*:*:*:*:*:*:*
cpe:2.3:a:sap:netweaver_process_integration:7.20:*:*:*:*:*:*:*
cpe:2.3:a:sap:netweaver_process_integration:7.30:*:*:*:*:*:*:*
cpe:2.3:a:sap:netweaver_process_integration:7.31:*:*:*:*:*:*:*
cpe:2.3:a:sap:netweaver_process_integration:7.40:*:*:*:*:*:*:*
cpe:2.3:a:sap:netweaver_process_integration:7.50:*:*:*:*:*:*:*

EPSS

Процентиль: 39%
0.00176
Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-306

Связанные уязвимости

CVSS3: 5.3
github
больше 3 лет назад

Several web pages provided SAP NetWeaver Process Integration (versions: SAP_XIESR: 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50 and SAP_XITOOL: 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50) are not password protected. An attacker could access landscape information like host names, ports or other technical data in the absence of restrictive firewall and port settings.

EPSS

Процентиль: 39%
0.00176
Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-306