Lucene search

SapCVE-2019-0390

HistoryNov 13, 2019 - 10:15 p.m.

CVE-2019-0390

2019-11-1322:15:11

CWE-200

sap

web.nvd.nist.gov

sap

data hub

cve-2019-0390

information security

unauthorized access

vulnerability

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

4.5

Confidence

High

EPSS

0.001

Percentile

22.7%

JSON

Under certain conditions SAP Data Hub (corrected in DH_Foundation version 2) allows an attacker to access information which would otherwise be restricted. Connection details that are maintained in Connection Manager are visible to users.

Affected configurations

Nvd

Node

sapdiagnostics_agentMatch7.2

VendorProductVersionCPE
sapdiagnostics_agent7.2cpe:2.3:a:sap:diagnostics_agent:7.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
sap	diagnostics_agent	7.2	cpe:2.3:a:sap:diagnostics_agent:7.2:::::::*

CNA Affected

[
  {
    "product": "SAP Data Hub (DH_Foundation)",
    "vendor": "SAP SE",
    "versions": [
      {
        "status": "affected",
        "version": "< 2.0"
      }
    ]
  }
]

References

launchpad.support.sap.com/#/notes/2842034

wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528880390

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

4.5

Confidence

High

EPSS

0.001

Percentile

22.7%

JSON

Related for CVE-2019-0390