PT-2019-4580 · Sap · Sap Work Manager+1

Publicado 2019-06-12 · Atualizado 2020-08-24 · CVE-2019-0314

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions SAP Work Manager versions 6.3 through 6.5 SAP Inventory Manager version 4.3

Description The issue is related to inadequate access control in the SAP Work Manager and SAP Inventory Manager applications, which can be exploited to cause a denial of service. This could allow an attacker to prevent legitimate users from accessing a service by crashing or flooding it.

Recommendations For SAP Work Manager versions 6.3 through 6.5, update to a version that addresses the access control issue. For SAP Inventory Manager version 4.3, update to a version that addresses the access control issue. As a temporary workaround, consider restricting access to the service to minimize the risk of exploitation.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

BDU:2020-00640

CVE-2019-0314

Produtos afetados

Wp Inventory Manager

Sap Work Manager

Referências · 6

• https://launchpad.support.sap.com/#/notes/2793805 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-0314 · Nota de Segurança
• https://threatpost.ru/sap-published-june-patch-notes/33079 · Nota
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=521864242 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2020-00640 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-0314 · Aviso do Fabricante