PT-2019-4572 · Sap · Sap Mobile Platform

Published 2019-03-12 · Updated 2020-08-24 · CVE-2019-0274

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions SAP Mobile Platform SDK versions prior to 3.1 SP03 PL02 SAP Mobile Platform SDK versions prior to 3.1 SP04

Description The issue is related to resource management errors in the SAP Mobile Platform SDK, which can be exploited by a remote attacker to cause a denial of service, either by crashing or flooding the service, thus preventing legitimate users from accessing it.

Recommendations For SAP Mobile Platform SDK versions prior to 3.1 SP03 PL02, update to version 3.1 SP03 PL02 or later. For SAP Mobile Platform SDK versions prior to 3.1 SP04, update to version 3.1 SP04 or later.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

BDU:2020-00632

CVE-2019-0274

Affected Products

Sap Mobile Platform

References · 6

• https://osv.dev/vulnerability/CVE-2019-0274 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-0274 · Security Note
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=515408080 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-00632 · Security Note
• http://securityfocus.com/bid/107360 · Note
• https://launchpad.support.sap.com/#/notes/2753497 · Note