PT-2019-4404 · Sap · Sap Netweaver As Java

Publicado

2019-11-12

·

Atualizado

2020-08-24

·

CVE-2019-0391

CVSS v3.1

4.3

Média

VetorAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions SAP NetWeaver AS Java versions prior to 7.10 SAP NetWeaver AS Java versions prior to 7.20 SAP NetWeaver AS Java versions prior to 7.30 SAP NetWeaver AS Java versions prior to 7.31 SAP NetWeaver AS Java versions prior to 7.40 SAP NetWeaver AS Java versions prior to 7.50
Description The issue allows an attacker to access restricted information under certain conditions due to a lack of protection for service data. This can enable a remote attacker to gain unauthorized access to protected information.
Recommendations For versions prior to 7.10, update to version 7.10 or later. For versions prior to 7.20, update to version 7.20 or later. For versions prior to 7.30, update to version 7.30 or later. For versions prior to 7.31, update to version 7.31 or later. For versions prior to 7.40, update to version 7.40 or later. For versions prior to 7.50, update to version 7.50 or later.

Correção

Information Disclosure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

BDU:2020-00126
CVE-2019-0391

Produtos afetados

Sap Netweaver As Java