PT-2019-11211 · Sap · Sap Cloud Connector

Publicado 2019-01-08 · Atualizado 2019-01-17 · CVE-2019-0247

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: SAP Cloud Connector versions prior to 2.11.3

Description: The issue allows an attacker to inject code that can be executed by the application, potentially controlling the application's behavior.

Recommendations: For versions prior to 2.11.3, update to version 2.11.3 or later to resolve the issue.

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2019-0247

Produtos afetados

Sap Cloud Connector

Referências · 4

• https://osv.dev/vulnerability/CVE-2019-0247 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-0247 · Nota de Segurança
• https://launchpad.support.sap.com/#/notes/2696233 · Aviso do Fabricante
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=509151985 · Aviso do Fabricante