CVE-2019-0399

Опубликовано: 11 дек. 2019

Источник: nvd

CVSS3: 6.5

CVSS2: 4

EPSS Низкий

Описание

SAP Portfolio and Project Management, before versions S4CORE 102, 103, EPPM 100 and CPRXRPM 500_702, 600_740, 610_740; unintentionally allows a user to discover accounting information of the Projects in Project dashboard, leading to Information Disclosure.

Ссылки

https://launchpad.support.sap.com/#/notes/2803554
Permissions Required
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=533660397
Vendor Advisory
https://launchpad.support.sap.com/#/notes/2803554
Permissions Required
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=533660397
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:sap:portfolio_and_project_management:cprxrpm_500_702:*:*:*:*:*:*:*

cpe:2.3:a:sap:portfolio_and_project_management:cprxrpm_600_740:*:*:*:*:*:*:*

cpe:2.3:a:sap:portfolio_and_project_management:cprxrpm_610_740:*:*:*:*:*:*:*

cpe:2.3:a:sap:portfolio_and_project_management:eppm_100:*:*:*:*:*:*:*

cpe:2.3:a:sap:portfolio_and_project_management:s4core_102:*:*:*:*:*:*:*

cpe:2.3:a:sap:portfolio_and_project_management:s4core_103:*:*:*:*:*:*:*

EPSS

Процентиль: 55%

0.00327

Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-qgr7-m5x8-r832